SIEBEL, SAP PUSH 
CRM UPGRADES 


Rivals battle for users 
with dueling releases 


MARC SONGINI 
Siebel Systems Inc. and SAP 
last week heated the 
competition the customer 
relationship management mar- 
ket announcing upgrades 
their rival application suites. 
Siebel released new ver- 
sion its applications, dubbed 
Siebel 7.5, that comes with 
hundreds built-in business 
processes tailored for users 
different vertical industries. 
For example, Siebel said ver- 


sion the software for retail 
banking will able auto- 
mate the process changing 
customer addresses and stop- 
ping payments checks. 
Siebel 7.5 also the first 
release the CRM software 
include pieces the com- 
pany’s Universal Application 
Network technology for devel- 
oping integration links with 
other systems, said Abbo, 
senior vice president tech- 
nology Siebel. 
Meanwhile, SAP detailed Ver- 
sion 3.1 its mySAP CRM soft- 
Siebel and SAP, page 


CUSTOMER-READY 


Forfull coverage CRM technology, 
QuickLink 


LEGACY TIES WEIGH CRM PROJECT 


Siebel user works 
integrate new, old apps 


LUCAS MEARIAN 
Countrywide Credit Industries 
Inc., billion financial ser- 
vices firm, embarking 
multiyear project roll out 
Siebel Systems Inc.’s customer 
relationship management soft- 
ware across divisions. But 
faces big challenge: integrat- 
ing the new applications with 
existing ones that run IBM 
AS/400s and mainframes. 

The project began July 
and expected take three 
five years complete, said 
Tony Vigna, vice president 
CRM development Cala- 


NEWSPAPER 


basas, Country- 
wide. declined comment 
the expected cost the 
Siebel rollout and the applica- 
tion integration effort. 

The planned installation 
the Siebel software de- 
signed give Countrywide 
complete set information 
about its customers through 
single user interface, and vice 
versa. “We wanted unified 
view our customer, well 
giving our customer uni- 
fied view us,” Vigna said. 

However, getting those uni- 
fied views will require the use 
integration tools developed 
Seattle-based WRQ Inc. 
middleware layer between 

Legacy Ties, page 
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SPECIAL REPORT 


One year after 

the devastat- 

ing attacks 
the World Trade Center 
and the Pentagon, profes- 
sionals are the forefront 
efforts prevent the 
nightmare recurrence 
what used unthinkable 
happens again. 


For access to all Computerworld stories on the Sept. 11 
attacks and their aftermath, please visit our Web site: 


QuickLink ai030 
www.computerworld.com 


SEPTEMBER 9, 2002 ® VOL 


exclusive Computerworld survey 
pros finds that better security 
awareness hasn’t yielded huge 
changes security investments; 
meanwhile, change the watchword 
critical infrastructure protection. 
STARTS ON PAGE 6. 


TECHNOLOGY 

Researchers the National Lab Los 
Alamos look for ways enable 
fight terrorism; corporations employ 
array tools and services assess 
how vulnerable their systems are 
cyberattack. STARTS ON PAGE 30. 


MANAGEMENT 

Companies add cyberattack exercises 
their disaster-preparedness plans; 
experts offer tips for combing through 
service contracts ensure 
covered the event terrorist-re- 
lated emergency. STARTS PAGE 44. 
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OPEN INFRASTRUCTURE 


NTEGRAT 


win the e-business game, everyone must connected, 
regardless platform device. With open infrastructure, you 
have the freedom integrate without having rip and replace. 


Get the game with Team IBM. With eServer™ 
systems, global integration experts and (the leading 
integration software you can implement and integrate 
new technologies with existing systems. 


For more Winning Plays, visit 


business the game. Play 


ty 


Does your software let you manage and protect your wireless enterprise matter 
where goes? 

Managing your enterprise was hard enough when you knew where was. Now, thanks the boom wireless devices, mission-critical 
data and systems can walk and out the door will. why it’s vital have software that can keep track your wireless enterprise 
matter where goes. Our infrastructure management software considered the gold standard, making one the best choices for 
securing and managing your global environment. And works across multiple platforms, it’s compatible with what you have today 


and what you add tomorrow. Sure, your devices may still get lost. But your information ca.com/wireless/enterprise 


Wireless Solutions Computer Associates™ 


© 2002 Computer Associates International, Inc. (CA). All rights reserved. 
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NEWS 


6-7 Our examination the one- 
year anniversary Sept. starts 
with survey that reveals that cor- 
porations still aren’t adequately 
funding security. Also, look 
how corporate America has re- 
sponded, and have discussion 
with the White House’s cybersecu- 
rity chief. 


Sharing classified information 
presents critical challenges the 
homeland security initiative. 

ROI survey says online 


training and e-business integration 
bring the biggest returns. 


Microsoft ships its Multipath 
I/O storage management software. 


Hershey’s R/3 upgrade went 
lot more smoothly than the initial 
installation back 


BREAKING NEWS 


For the latest news, updated twice daily, visit 


QuickLink a1510 
www.computerworld.com 


ASK PERMISSION 


The opt-in approach data privacy 
will prevail the global norm 
laws and business practices, writes 
privacy columnist Jay Cline. 


QuickLink 32611 


UDDI: LOOKING WEB SERVICES 


Universal Description, Discovery and Integration 
Internet-accessible registry which businesses, soft- 
ware vendors and programmers can describe the Web 

services they offer and provide links how 
use them. Find out more this week's 


QuickStudy. PAGE 


researchers are looking 
biology for more than superficial 
analogies they’re after real guid- 
ance, writes Gary Anthes. 


30 Los Alamos National Labora- 
tory developing new ways 
combat bioterrorist threats. 


Assessing the vulnerability 
their company’s systems has 
become crucial part man- 
agers’ jobs since Sept. and 
they’re using variety tools 
and services get done. 


Fully converged SAN/NAS 
network storage the key over- 
coming the limitations storage 
networking, says Network Appli- 
ance CTO Steven Kleiman. 


Security Journal: Mathias 
Thurman finds that eliminating 
rogue wireless LAN (WLAN) 
access points easier than creat- 
ing policies and standards 
secure WLAN infrastructure. 


LINUX YOU 


are currently more than 

100 ongoing discussions our 
forums about Linux and what 
really means for IT. Don’t you have 
something say? 


QuickLink a2470 
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TECHNOLOGY 
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BELIEVE 


world turned upside 
down the events 


Sept. ll, Frank Hayes reveals solid core beliefs 
that anchors all professionals their work ... 
and their world. PAGE 


MANAGEMENT 


Forget reading, writing and 
Bart Perkins says 
there are three new for supplier 
management. Here’s how put 
them to work to cut costs. 


Corporations are adding 
cyberattack exercises their 
disaster-preparedness tactics the 
event terrorist assault their 
infrastructure. 


Beware force majeure claus- 
contracts. These typically 
vendor-controlled provisos, the 
definitions which have been 
quietly expanding, can leave your 
firm the lurch. 


Despite flat budgets, 
companies are taking business 
continuity into their own hands. 


William Ulrich explains 
his new book how companies 
can incorporate Web-based 
systems the critical data and 
functionality that’s locked 
their old applications. 


ONE YEAR AFTER 


Has the government done enough 
protect critical infrastructure? 
Has the private sector? Post your 
comments in our discussion forum. 


QuickLink a2480 


See our complete coverage the 
Sept. attack and how has 
responded. 

QuickLink 


tia nr 
Ui 


Maryfran Johnson examines 
the results Computerworld.com 
survey that polled readers how 
their companies have responded 
protect resources since the 
Sept. attacks. Although she sees 
plenty areas improve, she 
continues impressed with 
IT’s response. 


Pimm Fox chats with the CIO 
Kemper Casualty, who says 
eliminating paper became key 
goal after the company lost two 
floors offices the World Trade 
Center. 


Thornton May critiques the 
lack critical thinking inside 
Dell. The maker’s latest moves 
are uninspired, says. May offers 
three suggestions that says 
Michael Dell can take the bank. 


How to Contact CW ' 60 


WHAT'S QUICKLINK? 


some pages this issue, 

you'll see QuickLink code 
pointing additional, related con- 
tent on our Web site. Just enter that 
code into our QuickLink box online, 
which you'll see the top each 
page our site. 

Use QuickLinks see related 

stories, discussion forums, research 


links, archives and more. 


1 
| 
| 
| | 


NEWSSPECIAL REPO! 


Watchfulness Rises, 
But Budgets Limit 


Survey reveals new funds lacking bolster data security 


MARK HALL 
HOUGH profes- 
sionals are now 
alert the threat 
terrorism, that 

pushed organizations 
radically revamp 
their business con- 
tinuity data secu- 
rity plans, accord- 
ing the results 
exclusive Com- 
puterworld online survey. 

more about the 
Russians and script kiddies 
than al-Qaeda,” said Alan We- 
ber, senior systems analyst 
Austin, Texas-based Asso- 
ciates, which manages human 
resources data for other firms. 

His remarks reflect the find- 
ings online poll conduct- 
the last week August 
2,620 professionals, barely 
half whom said their organi- 
zations have launched projects 
improve data security re- 
sponse the terrorist attacks 
the World Trade Center and 
Pentagon year ago this week. 

Many users said their exist- 
ing plans protect their as- 
sets are adequate. “If you're al- 
ready connected the Inter- 
net, you already have security 


issue, and should not have 
made difference,” Weber said. 

added that his company 
had disaster preparedness and 
recovery plans place already 
because the threat torna- 
dos and fire, “where the odds 
them happening are 
far higher.” 

Jim Prevo, CIO 
Green Mountain 
Coffee Roasters Inc. 
Waterbury, Vt., 
said that his company simply 
continuing with the disaster 
preparedness plan had 
place before Sept. 

Like most companies the 
survey, Green Mountain didn’t 
boost spending take new 
projects for business continu- 
ity and security, because fund- 
ing for those areas already 
addressed the budget proc- 
ess. The installation new 
firewall was the budget be- 
fore last September, Prevo said. 


Standard Reponse 

Mark Shainman, analyst 
Meta Group Inc. Stam- 
ford, Conn., said isn’t sur- 
prised the survey’s findings. 

“Initially, there was great 
fervor about security and busi- 
ness [continuity],” said. But 


Companies are adjusting to 
the new level of heightened 
security consciousness. 


Who’s winning? 

® Telecommuters: 30% of 
survey respondents said their 
companies now encourage more 
people to work at home. 


® Video and Web conference 
providers: More than 35% said 
their organizations now use the 
technologies. 


losing? 

§ Travel industry: More than one- 
fourth (27.5%) said their companies 
have reduced employee travel “for 
safety reasons.” 


with budget constraints and 
existing protections place, 
most companies left things 
alone, Shainman said. 
“Everyone agrees it’s big 
issue,” said David Nessl, a se- 
nior systems administrator 
American Systems Consulting 
Inc. Dublin, Ohio. “But 
there’s budget for it, and 
you still have deal with it.” 
Nessi said his department 
now taking “snapshots the 
data twice day make sure 
more than half-day 
out sync.” The company also 
used previously budgeted dol- 


Attitudes: The Single Biggest Change 


Brookings, S.D., long way from 
the World Trade Center and the 
Pentagon. And the workers 
Falcon Plastics headquarters 
there have illusions that they are 
any hit list. But that 
mean the events Sept. 
didn’t change the atti- 
tude about protecting its informa- 
tion assets. 

has caused sit back and 
evaluate our disaster protection and 
data security policies,” said Lisa Ben- 


der, manager the plastics manu- 
facturer. never assume 
have gaps our system again.” 
Attitudes about disaster pre- 
paredness and security are what 
changed the most after the terror at- 
tacks the U.S. last year, accord- 
ing many professionals. 
Barbara Brennan, director tech- 
nology Panzano Partners Ltd. 
Morristown, said that although 
the company updated its firewalls 
and bought some virus protection 


software after Sept. 11, “the biggest 
change since the tragedy has been 
people’s awareness security.” 

Jim O'Keefe, director Resco 
Products Inc. Pittsburgh, agreed. 
“Sept. brought out how vulnerable 
everyone is,” said. 

added that the tragedy 
focused employees’ attention 
business continuity and security. “It 
did away with the nice, but 
it'll never happen here’ thinking.” 

Mark 


lars buy mass storage tech- 
nology from EMC Corp. that 
can mirror data remote site. 

Still, many firms did take the 
tragedy wake-up call 
improve data security. 

Stanley Aviation Corp. 
Denver, MIS director David 
Edwards said backup was the 
company’s only disaster recov- 
ery plan before Stanley 
Aviation working out plans 
with sister company use 
each other’s data centers for 
business continuity operations, 
said, and has added hard- 
ware firewall and new proxy 
servers improve security. 

Some firms even changed 
their management structures 
response the attacks. Charlie 
Orndorff, CIO Crossmark 
Inc. Plano, Texas, said that al- 
though his overall budget hasn’t 
increased, there has shift 
priorities. “Most significant 
the creation new posi- 
tion for manager infrastruc- 
ture security,” said. 
added that while the company 
had already been evaluating 
72-hour 
program with Wayne, Pa.-based 
SunGard Data 
“Sept. expedited the process.” 

In some markets, the shift 
has been dramatic. According 
John Hall, president call 
center designer Televerity LLC 
Indianapolis, his clients are 
now demanding business con- 
tinuity options. 

“Disaster recovery now 
40% our revenues,” said. 
“Last year, was 


Computerworld’s survey was 
conducted collaboration with 
Perseus Development 
market research firm Brain- 
tree, Mass. (www.perseus.com). 


ADDITIONAL FINDINGS 


More survey results can be found online 
QuickLink 32710 
www.computerworld.com 

The response of IT in the wake of 9/11 contin- 

ues to impress Maryfran Johnson. Page 26 


SYSTEMS CONSULTING 


improve disaster pre 
and recover 

since 


’ 


budget for it, 
and you still 
have deal 
with it. 


DAVID NESSL, SYSTEMS 
ADMINISTRATOR, AMERICAN 


State 
Among the 2,620 
respondents, just under half 
additional funds; most 
TT budget 
with 
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Corporate America Now 
Front Lines War Terror 


DAN VERTON 
YEAR 
week, America 
was attacked 
global enemy that 
has demonstrated 
its determination use any 
means its disposal wreak 
havoc and fear, damage the 
economy and compel the na- 
tion withdraw from the in- 
ternational community. 

that regard, Sept. 11, 2001, 
colossal failure for interna- 
tional terrorism, say govern- 
ment and private-sector secu- 
rity experts. 

Rather 
country state stunned 
inaction, the attacks triggered 
what many security experts 
say was long overdue: nation- 
wide effort bolster home- 
land security and critical infra- 
structure protection con- 
cept that has placed private 
companies the front lines 
national defense. 

“It’s never been done be- 
fore,” said Steve Cooper, CIO 
the White House’s Office 
Homeland Security, referring 
the massive integration ef- 
fort now under way help 
improve security information 
sharing among government 
agencies and the hundreds 
private companies that own 
and operate 90% the na- 
tion’s critical systems. “We 
must it, and can it,” 
said Cooper, speaking Aug. 
government symposium 
homeland security. 


Perception Game 

However, proponents crit- 
ical-infrastructure protection, 
particularly the area cy- 
bersecurity, face many the 


same challenges that terrorism 


experts encountered prior 
Sept. Few the private sec- 
tor perceive that there’s im- 
minent threat the digital 
homeland, and fewer still ac- 
knowledge terrorists’ ability 
and willingness adapt their 
tactics take advantage 


the 


America’s digital Achilles’ heel 
its information networks. 

Every so-called critical in- 
frastructure the U.S., from 
telecommunications trans- 
portation, banking and energy, 
relies computers and com- 
puter networks, National Secu- 
rity Adviser Condoleezza Rice 
said March last year during 
her first major policy address 
the topic. 

“Corrupt those networks, 
and you disrupt this nation,” 
she said. “Today, the cyber- 
economy the economy.” 

“The terrorists the Sept. 
event had the patience plan 
the foresight and the un- 
derstanding the infrastruc- 
ture that could used si- 
multaneously sequentially 
disrupt the infrastructure elec- 
tronically,” said Paula Scalingi, 
former director critical in- 


U.S. Department Energy. 
“That could cause major re- 
gional failure this country. 
There’s question that that’s 
doable.” 


Game Dominoes 

The reality the threat 
the nation’s critical infrastruc- 
ture, particularly the areas 
power, telecommunications 
and emergency services, was 
demonstrated June when 
the federal government co- 
sponsored exercise known 


HOMELAND DEFENSE 


The lessons of Sept. 11 are pushing priority 
wireless access and backbone security: 


QuickLink 32690 


More R&D is needed to protect critical 
industrial systems in the energy sector 
against cyberattacks, officials say: 


QuickLink 32706 


The world’s three largest seaport 
operators are collaborating to demon- 
strate and deploy automated tracking 
and security technology for containers 
entering U.S. ports: 
QuickLink 32671 
www.computerworld.com 


White House Cybersecurity 
Chief Defines the Threat 


Richard Clarke, chairman the 
Critical Infrastructure Pro- 
tection Board, recently spoke with 
Computerworld reporter Dan Verton 
about the nature and potential the 
threat the nation’s critical infrastruc- 
ture. also discussed what sees 
his biggest challenges with respect 
national cybersecurity. Excerpts 
from the interview follow: 


Can you briefly expiain the cyber- 
security threat for those who 
still may not sure who 

what the enemy is? 
out there, some which 
experience every day. That 
spectrum runs from 
als] who simply vandalize 

Web pages those who 
conduct nuisance denial-of- 
service attacks. the 
low end, which usually con- 
ducted young hackers 


so-called script kiddies. 

the middle, you have criminals 
who conduct fraud and industrial espi- 
onage online. The middle range 
threats usually carried out org- 
anized crime, companies and also 
nation-states. 

the high end, however, you 
face people who potentially could 
conduct attacks to destroy or stop 
things from working. the high end, 
potentially nation-states terror- 
ist groups. These attacks could 
conducted isolation 
conjunction with physi- 
cal attack. 

think have antici- 
pate that a smart opponent 
would use some these 
asymmetric tactics against 
us. the larger scenarios, 
the private sector would 
the targets for attack, 
either terrorist groups 
nation-states, because those 


frastructure protection the Blue Cascades. Dozens 


government and private-sector 
representatives from five U.S. 
states the Pacific Northwest 
and three Canadian provinces 
confronted the very real po- 
tential for 
structure failures resulting 
from combined physical and 
cyberterrorist incidents. 

The results were chilling. 
Simulated terrorist attacks dis- 
rupted the region’s electric 
power grid, causing power out- 
ages that spread quickly oth- 
Western states and lasted 
for more than week, accord- 
ing exercise coordinators. 
The exercise also included si- 
multaneous physical and cy- 
berdisruptions the region’s 
telecommunications 
ural gas distribution systems, 
municipal water system and 
the region’s ports. 

Once the electric grid dis- 
rupted, the other infrastruc- 
tures that businesses and gov- 
ernment agencies rely for 
their day-to-day operations, in- 
cluding telecommunications, 


groups would seek disrupt the na- 
tional economy. 


What are the greatest challenges 
facing the private sector in terms 
cybersecurity, particularly with 
respect your mission building 
effective public/private partner- 
ship that can provide for the com- 
mon defense? The first problem 
always had was awareness. 
However, the awareness problem has 
diminished greatly for two reasons. 
People boardrooms asked them- 
selves after Sept. 11, “How secure 
our company?” Also, there have been 
cyberattacks, which have dou- 
the last year. 

The second problem facing com- 
panies determining what good 
product, good service pro- 
vider and what they should asking 
for. Most people think the first thing 
run out and buy firewall 
intrusion-detection system. But 
that doesn’t even begin solve your 
problems. You need have contin- 
uous process looking for vulnera- 
bilities, and you need have lay- 
ered defense. passed the 2,000 
mark few months ago terms 
known vulnerabilities that have 
deal with. 


What Critical 
Infrastructure? 


Facilities and systems 
that operate and manage 
daily services the follow- 
ing sectors are considered 
part the critical infra- 
structure: 


Banking and finance 
Emergency services 


Essential government 
services 


care 


Telecommunications 


Transportation 


Water systems 


transportation, emergency ser- 
vices, hospitals and law en- 
forcement, begin fall like 
dominoes, according the final 
report the lessons learned 
from the exercise. 


Are you satisfied with the effort 
expended date the regional 
infrastructure level the various 
state and federal agencies and the 
private sector? never 
feeling good about the federal gov- 
own activities and that ma- 
jor sectors of the private sector are 
taking action. 

For example, the banking and fi- 
nance sector doing great deal; the 
electric power grid for the first time 
thinking about encryption; and the 
sector itself beginning talk about 
quality software development and 
making security design criteria. 
Companies like Oracle, Sun, Microsoft 
and Cisco are leading that effort. 
security also top issue the pri- 
vate sector. 

also are looking for input from 
small and medium-size IT companies. 
lot good ideas are found the 
garage, discovered. We've 
proactively sought them out and met 
with them one one. 


IN-DEPTH ONLINE 


To read the full version of our interview with 
Critical Infrastructure Protection Board 
Chairman Richard Clarke, visit our Web site: 


QuickLink 32695 
www.computerworld.com 


Watchfulness Rises, 
But Budgets Limit Change 


Survey reveals new funds lacking bolster data security 


MARK HALL 
HOUGH IT profes- 
sionals are now 
alert the threat 
terrorism, that 
generally 

pushed organizations 

radically revamp 

their business con- 

tinuity data secu- 

rity plans, accord- 

ing the results 

exclusive Com- 

puterworld online survey. 

“I worry about the 
Russians script 
than al-Qaeda,” said Alan We- 
ber, senior systems analyst 
Austin, Texas-based Asso- 
ciates, which manages human 
resources data for other firms. 

His remarks reflect the find- 


more 


ings online poll conduct- 
addressed the budget proc- 
ess. The installation new 


the last week August 
2,620 professionals, barely 
half whom said their organi- 


zations have launched projects 


improve data security re- 
sponse the terrorist attacks 
the World Trade Center and 
Pentagon year ago this week. 

Many users said their exist- 
ing plans protect their as- 
sets are adequate. “If you're al- 
ready connected the Inter- 
net, you already have security 


kiddies 
place before Sept. 


issue, and should not have 
made difference,” Weber said. 

added that his company 
had disaster preparedness and 
recovery plans place already 


| because of the threat of torna- 


dos and fire, “where the odds 
them happening are 

far higher.” 
Jim Prevo, CIO 
Green Mountain 
Coffee Roasters Inc. 
Waterbury, Vt., 
said that his company simply 
continuing with the disaster 
preparedness plan had 


Like most companies the 


survey, Green Mountain didn’t 


boost spending take new 
projects for business continu- 
ity and security, because fund- 
ing for those areas already 


firewall was the budget be- 
fore last September, Prevo said. 


Standard Reponse 


Mark Shainman, analyst 


Meta Group Inc. Stam- 
ford, Conn., said he isn’t sur- | 


prised the survey’s findings. 

“Initially, there was great 
fervor about security and busi- 
ness [continuity],” said. But 


Companies are adjusting to 
the new level of heightened 
security consciousness. 


Who’s winning? 

® Telecommuters: 30% of 
survey respondents said their 
companies now encourage more 
people to work at home. 


@ Video and Web conference 
providers: More than 35% said 
their organizations now use the 
technologies. 


Who’s losing? 

8 Travel industry: More than one 
fourth (27.5%) said their companies 
have reduced employee travel “for 
safety reasons.” 


with budget constraints and 


existing protections place, 


most companies left things 
alone, Shainman said. 
“Everyone agrees it’s big 
issue, 
nior systems administrator 
American Systems Consulting 
Inc. Dublin, Ohio. “But 
there’s budget for it, and 
you still have deal with it.” 


said his department 
expedited the process. 


now taking “snapshots the 
data twice day make sure 
more than half-day 
out syne.” The company also 
used previously budgeted dol- 


Attitudes: The Single Biggest Change 


Brookings, S.D., long way from 
the World Trade Center and the 
Pentagon. And the workers 
Falcon Plastics headquarters 
there have illusions that they are 
any hit list. But that 
mean the events Sept. 
didn’t change the atti- 
tude about protecting its 
tion assets. 

“It has caused sit back and 
evaluate our protection and 
data security policies,” said Lisa Ben- 


der, manager the plastics manu- 
facturer. “We'll never assume 
have gaps our system again.” 
Attitudes about disaster pre- 
paredness and security are what 
changed the most after the terror at- 
tacks the U.S. last year, accord- 
ing many professionals. 
Barbara Brennan, director 
nology Panzano Partners Ltd. 
Morristown, N.J., said that although 
the company updated its firewalls 
and bought some virus protection 


software after Sept. 11, “the biggest 
change since the tragedy has been 

Jim director Resco 
Products Inc. Pittsburgh, agreed. 
“Sept. brought out how vulnerable 
everyone is,” said. 

added that the tragedy 
focused attention 
business continuity and security. “It 
did away with the nice, but 
never happen here’ thinking.” 

Mark Hall 


said David Nessl, se- 
| ture 


lars buy mass storage tech- 
nology from EMC Corp. that 
can mirror data remote site. 

Still, many firms did take the 
tragedy wake-up call 
improve data security. 

Stanley Aviation Corp. 
Denver, MIS director David 
Edwards said backup was the 
company’s only disaster recov- 
ery plan before Stanley 
Aviation working out plans 
with sister company use 
each data centers for 
business continuity operations, 
said, and has added hard- 
ware firewall and new proxy 
servers improve security. 

Some firms even changed 
their management structures 
response the attacks. Charlie 
Orndorff, CIO Crossmark 
Inc. Plano, Texas, said that al- 
though his overall budget 
increased, there has shift 
priorities. “Most significant 
the creation new posi- 
tion for manager infrastruc- 
security,” said. 
added that while the company 
had already been evaluating 
program with Wayne, Pa.-based 
SunGard Data 

some markets, the shift 
has been dramatic. According 
to John Hall, president of call 
center designer Televerity LLC 
Indianapolis, his clients are 
now demanding business con- 
tinuity options. 

“Disaster recovery now 
40% our revenues,” said. 
“Last year, was zero.” 


| Computerworld’s survey was 
conducted collaboration with 


Perseus Development Corp., a 
market research firm Brain- 
tree, Mass. (www.perseus.com). 


FINDINGS 


More survey results can be found online 
QuickLink 32710 
www.computerworld.com 

The response of IT in the wake of 9/11 contir 


ues to impress Marytran Johnson. Page 26 
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Corporate America Now 


Front Lines War Terror 


DAN VERTON 
YEAR this 
week, America 
was attacked 
global enemy that 
has demonstrated 
its determination use any 
means its disposal wreak 
havoc and fear, damage the 
economy and compel the na- 
tion withdraw from the in- 
ternational community. 

that regard, Sept. 11, 2001, 
colossal failure for interna- 
tional terrorism, say govern- 
ment and private-sector secu- 
rity experts. 

Rather than leaving the 
country state stunned 
inaction, the attacks triggered 
what many security experts 
say was long overdue: nation- 
wide effort bolster home- 
land security and critical infra- 
structure protection con- 
cept that has placed private 


companies the front lines 


national defense. 
“It’s never been done be- 
fore,” said Steve Cooper, CIO 


the White House’s Office 


Homeland Security, referring 
the massive integration ef- 
fort now under way help 
improve security information 
sharing among government 


agencies and the hundreds of 


private companies that own 
and operate 90% the na- 
tion’s critical systems. “We 
must it, and can it,” 
said Cooper, speaking Aug. 
government symposium 
homeland security. 


Perception Game 

However, proponents crit- 
ical-infrastructure protection, 
particularly the area cy- 
bersecurity, face many the 
same challenges that terrorism 
experts encountered prior 
Sept. ll: Few the private sec- 
tor perceive that there’s im- 
minent threat the digital 
homeland, and fewer still ac- 
knowledge terrorists’ ability 
and willingness adapt their 
take 


tactics to 


advantage 


America’s digital Achilles’ heel 
its information networks. 

Every so-called critical in- 
frastructure the U.S., from 
telecommunications trans- 
portation, banking and energy, 
relies computers and com- 
puter networks, National Secu- 
rity Adviser Condoleezza Rice 
said March last year during 
her first major policy address 
the topic. 

“Corrupt those networks, 
and you disrupt this nation,” 
she said. “Today, the cyber- 
economy the economy.” 

“The terrorists the Sept. 
event had the patience plan 
the foresight and the un- 
derstanding the infrastruc- 
ture that could used si- 
multaneously sequentially 
disrupt the infrastructure elec- 
tronically,” said Paula Scalingi, 
former director critical in- 


frastructure protection the 
U.S. Department Energy. 
“That could cause major re- 
gional failure this country. 


There’s question that that’s 


doable.” 


Game Dominoes 

The reality the threat 
the nation’s critical infrastruc- 
ture, particularly the areas 
power, telecommunications 
and emergency services, was 
demonstrated in June when 
the federal government 


sponsored exercise known 


More R&D is 


industrial 


Strial syst 
against cyberattacks, official 
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as Blue Cascades. Dozens of 


government and private-sector 
representatives from five U.S. 
states the Pacific Northwest 
and three Canadian provinces 
confronted the very real po- 


tential for 


from combined physical and 
cyberterrorist incidents. 

The results were chilling. 
Simulated terrorist attacks dis- 
rupted the region’s 
power grid, causing power out- 
ages that spread quickly oth- 
Western states and lasted 
for more than week, accord- 
ing exercise coordinators. 
The exercise also included si- 
multaneous physical and cy- 
berdisruptions the region’s 
telecommunications 
ural gas distribution systems, 
as well as a threat to a major 
municipal water system and 
the region’s ports. 

Once the electric grid dis- 
rupted, the other infrastruc- 
tures that businesses and gov- 
ernment agencies rely for 
their day-to-day operations, in- 
cluding telecommunications, 


electric 


What Critical 
Infrastructure? 


Facilities and systems 
that operate and manage 
daily services the follow- 
ing sectors are considered 
part the critical infra- 
structure: 

Banking and finance 

Emergency services 


Essential government 
services 


care 
Telecommunications 
Transportation 


Water systems 


transportation, emergency ser- 
vices, hospitals and law en- 
forcement, begin fall like 
dominoes, according the final 
report the lessons learned 
from the exercise. 


White House 


Cybersecurity 


Chief Defines the Threat 


Richard Clarke, chairman the 
president's Critical Infrastructure Pro- 
tection Board, recently spoke with 
Computerworld reporter Dan Verton 
about the nature and potential of the 
threat to the nation’s critical infrastruc- 
ture. He also discussed what he sees 


his biggest challenges with respect 


to national cybersecurity. Excerpts 
from the interview follow: 


Can you briefly explain the cyber- 
security threat for those who 
still may not sure who 

what the enemy is? 
There's spectrum threats 
out there, some of which we 
experience every day. That 
spectrum runs from [individu- 
als] who simply vandalize 

Web pages to those who 
conduct nuisance denial-of- 
service attacks. the 
low end, which usually con- 
ducted by young hackers - 


| anized crime, companie 


jou have criminals 
who conduct fraud and industrial espi- 

onage online. The middle range of 

threats is usually carried out by org- 


nation-states 

the high end, however, you 
face people who potentially could 
conduct attacks to destroy or stop 
from working. the high end, 

$ potentially nation-states or terror- 
i groups. These attacks could be 
conducted in isolation or 
in conjunction with a physi- 
cal attack. 

| think we have to antici- 
pate that a smart opponent 
would use some these 
asymmetric tactics against 
us. In the larger scenarios, 
the private sector would 
the targets for attack, 
either by terrorist groups or 
nation-states, because those 


groups would seek to disrupt the na 
tional economy. 


What are the greatest challenges 
facing the private sector terms 


cybersecurity, particularly with 


respect your mission building 
an effective public/private partner- 
ship that can provide for the com- 
mon defense? The first 
we've always had was awareness 
However, the awareness pro 
diminished greatly for two reasons. 
People in boardrooms asked them- 

selves after Sept. 11, “How secure 
our company?” Also, there have been 
lot cyberattacks, which have dou- 
bled the last year. 

The second problem facing com- 
panies determining what good 
product, who's a good service pro- 
vider and what they should asking 
for. Most people think the first thin 
run out and buy firewall 
intrusion-detection system. But 
that doesn’t even begin solve your 
problems. You need have contin- 
uous process looking for 
bilities, and you need have lay- 
ered defense. passed the 2,000 
mark few months ago terms 
known vulnerabilities that have 
deal with. 


Are you satisfied with the effort 
expended to date at the regional 
infrastructure level the various 
state and federal agencies and the 
private sector? never satisfied. 
yood about federal gov- 


For example, the banking and fi- 
or is doing a great deal: the 
the first time 
thinking about encryption; and the IT 
sector itself is beginning to talk about 
quality software development and 
making security design criteri 
Companies like Oracle, Sun, 


nance sect 


and Cisco are that effort. 
security also top issue the pri- 
vate sector. 


also are looking for input from 
small and medium-size companies 
lot good ideas are found the 
garage, discovered. We've 
proactively sought them out and met 
with them one on one. DB 


IN-DEPTH ONLINE 
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US. Intelligence Community 
Faces Info-Sharing Overhaul 


Homeland security poses unprecedented 
data-sharing challenges for agencies 


DAN VERTON 
US. intelligence 
community knows 
has improve 
the efficiency 
sharing efforts. But the com- 
munity’s experts also know 
that massive change doesn’t 
mean starting from scratch and 
giving everybody access 
everything. 

trying 
use the existing 
capabilities 
the community,” 
said Bill Dawson, 
the intelligence community’s 
deputy CIO. That means lever- 
aging the massive yet classi- 
fied investment systems 
and infrastructure that has 
taken place during the past 
decade, said Dawson and other 
top intelligence officials. Daw- 
son’s post lies within the CIA 
director’s community manage- 
ment staff, which has oversight 
responsibilities for all agen- 
cies that make the USS. in- 
telligence community. 


But homeland security infor- 
mation sharing poses unique 
security challenges that few 
people outside the intelligence 
community appreciate, Daw- 
son said. For example, intelli- 
gence agencies are for the first 
time being asked share in- 
formation collected from high- 
sensitive sources with agen- 
cies that sit outside the tra- 
ditional boundaries 
the intelligence 
community, such 
the Environmental 
Protection Agency 
(EPA) and the De- 
partment Agriculture, ac- 
cording Dawson. 

“You really shouldn’t have 
EPA officials surfing through 
military order-of-battle infor- 
mation,” said Dawson. “I can 
run wire and give you infor- 
mation, but what do you want, 
what you need, and what 
are you going with it?” 

Those are questions senior 
intelligence officials are grap- 
pling with they anticipate 
the likely creation Depart- 


‘Searching Intelink Like Shooting Craps’ 


The foundation ICSIS in- 
tranet called Intelink, the first classi- 
fied intelligence community 
net, which was set 1994. 

“What we're really doing now 
going beyond the base- 
line have with Intelink,” said 
Dolly Greenwood, director archi- 
tecture for ICSIS. 

And while remains “the 
basis for how people share informa- 
tion” the intelligence community, 
according John Brantley, director 
the Intelink Management Office, 
there are significant changes the 
way for the intranet. One such 
change the development 


structured database help make 
sense the 2.4 million Web pages 
that currently populate the top- 
secret version Intelink. 
“Searching like shoot- 
ing craps,” said Stephen Selwyn, 
director knowledge management 
the Office the Intelligence Com- 
munity However, of- 
fice plans deploy Novernber 
what browser-based “in- 
community collaborative 
presence,” letting intelligence ana- 
lysts enter collaborative communi- 
ties interest from their desktops 
without needing other infrastructure. 
Dan Verton 


ment Homeland Security, 
which will need access 
highly compartmented intelli- 
gence data. And despite high- 
profile data-sharing failures 
the past few years Sept. 
being the worst master ar- 
chitecture plan has been the 
works and now getting the 
attention deserves. 

The centerpiece that plan 
the Intelligence Community 
System for Information Shar- 
ing (ICSIS). It’s Web-based 
system that comprises both the 
Top Secret Joint Worldwide 
Intelligence Communications 
System and the Secret Internet 
Protocol Routing Network, 
which the defense and intelli- 
gence communities have been 
using for years share data. 
The difference now that 
Dawson and others are work- 
ing build browser-based 
front end that take users 
directly these systems but 
rather role-based common 
virtual collaboration space. 


Sharing Secrets 


ICSIS will provide the con- 
trolled interfaces that will for 
the first time let the intelligence 
community automate the pro- 
cess stripping out from clas- 
sified documents 
sources and methods intelli- 
gence collection. will also au- 
tomate the sharing that intel- 
ligence with analysts and offi- 
cials with “Secret” lower se- 
curity clearances. 

ment, which now under way, 
involves various collaboration 
“enablers,” such public-key 
infrastructure encryption tech- 
nology; directory intelli- 
gence analysts who can con- 
tacted means encrypted 
community e-mail; 
oration software tool suite; 
trusted interfaces for access 
replicated data repositories 
different security levels; and 
metadata markup process 
support data discovery. 


John Brantley, director the 
Intelink Management Office 
(see box), said there will 
managed entry points into seg- 
regated communities inter- 
est for all security levels. One 
those entry points will lead 
the Open Source Informa- 
tion System, collaborative, 
virtual private network (VPN)- 
enabled workspace for sharing 
sensitive but unclassified data 
and open-source news reports 
from around the world. That’s 
capability critics have said 
the intelligence communi- 


Technology 
Aids Hunt 
For Terrorists 


DAN VERTON 
Analysts and field operatives from the 
the National Security Agency 
(NSA) have stepped offensive opera- 
tions against terrorists around the world 
using sophisticated text and audio 
search and analysis technologies. 

“We've increased the number 
teams around the world collecting infor- 
mation and activi- 
ties,” acknowledged Philip Lago, execu- 
tive secretary the CIA. “The tempo 
that activity has increased dramatically.” 

Those operations have also in- 
creased the volume raw technical 
intelligence phone, radio and video 
recordings well text flowing into 
the headquarters the NSA 
Va., and Fort Meade, 
respectively. The result: dramatic up- 
swing demand for technology help 
ensure that analysts miss critical 
communications code words that 
could used launch attack. 

One those technologies the 
Name Reference Library from Language 
Analysis Systems Inc. (LAS) Herndon, 
Va. The software analyzes name origins, 
tells the user whether not multiple 
middle and last names are the right or- 
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has both lacked and ignored. 
There’s even talk creating 
VPN link from the intelligence 
community the Regional In- 
formation Sharing System Net- 
work, state and local criminal 
intelligence database. 

the end, there’s silver 
bullet, Dawson said. “Databas- 
will always challenge,” 
said. More important, 
added, people should under- 
stand that “we don’t have some 
magical box out there that 
not telling them about.” 


INTRANET FOR SHARING 


The State Department wants to expand the 
intelligence community's intranet to all of its 
257 posts worldwide: 
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Armed with GIS technology, NIMA is 
providing critical geospatial intelligence: 
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der (Egyptian- and Saudi-born citizens 
often use multiple generational names), 
and provides alist the top spelling 
variants well gender associations. 

LAS working product that will 
enable processing native scripts, said 
Hermansen, the president. 
“Ifyou can capture Mohamed Arabic, 
for only spelled one way. 
other languages,” said. LAS plans 
complete development work the new 
version the next six months. 

Meanwhile, NSA analysts, who are 
responsible for intercepting and ana- 
lyzing hundreds terabytes archived 
and real-time voice, data and video com- 
munications, are getting help from Fast 
Talk Communications Inc. 

Fast Talk President Armistad Whitney 
said the software can break 
down speech smallest compo- 
nents, called phonemes. The phonemes 
can then indexed and searched for 
keywords. The software can retrieve any 
word, name phrase from voice data, 
regardless speaker dialect, with 
98% accuracy and 72,000 
times faster than real time, company 
Officials said. Analysts can therefore 
search through hours audio 
than1second. 

The company signed two contracts 
with the intelligence community within 
the past days. Currently the de- 
ployment phase, the software being 
loaded laptop computers for use 
the field and multiprocessor enter- 
prise systems at agency headquarters, 
Whitney 
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Get the Price/Performance Advantage 


With Oracle, Dell and Red Hat 


“Those running Oracle, Dell, and 
Red Hat Linux have price/performance 


advantage. Users can buy four 4-way 


Dell servers running Oracle and Linux 
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than 16-way proprietary SMP 


system hefty savings.” 
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DEADLINE 
Oracle Cut 270 
U.K. Consulting Jobs 


Oracle Corp. said it plans to cut 
about 270 consulting jobs the 
U.K., although the software vendor 
said it will try to redeploy some of 
the workers into different positions. 
Oracle, which has about 3,100 em- 
ployees the U.K., said it’s “con- 
stantly evaluating business-critical 
staffing allocations” as part of an 
effort to consolidate operations and 
increase technical efficiencies. 


BEA Readies JVM 


Software Upgrade 


San Jose-based BEA Systems Inc. 
today plans to release a new version 
of its Java virtual machine (JVM) 
software for Intel-based servers. 
BEA said WebLogic JRockit 7.0 
includes support for running Java 
applications systems built around 
Corp.’s Xeon and Itanium chips. 
The software also supports interop- 
erability across the hardware plat- 
forms of various server vendors. 


Internal, External 


Hewlett-Packard Co. said has cre- 
ated a new group within its profes- 
sional services unit to design and 
implement internal and 

to advise the company’s customers 
technology strategies. The group 
Napier and to an executive within 
the services unit. 


Ordered Pay 


For Buyout Violations 


appeals court New York 
ruled that Computer Associates in- 
ternational has pay $10.3 
million to former shareholders of a 
software vendor bought 1991. 
The court upheld decision, 
issued in September 2000, that CA 
paid more for the stock On-Line 
Software International CEO 
than paid other shareholders. 
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Cost, 
New Unix Server Line 


Preconfigured systems emphasize price 
over power for users with tight budgets 


JAIKUMAR VIJAYAN 
AND TODD WEISS 
EWLETT-PACKARD 
Co. last week in- 
troduced line 
preconfigured 
Unix servers, and 
analysts said the new systems 
could appeal users who are 
willing sacrifice some per- 
formance and flexibility get 
good price. 

HP’s Series server line 
features three models that are 
based the company’s 650- 
MHz PA-RISC processor and 
run its HP-UX lli operating 
system. The servers are avail- 
able only 
standardized models, ranging 
from one-processor model 
eight-processor system. 

Starting prices range from 
$4,795 for one-processor ver- 
sion the entry-level RP2405 
system with 512MB memory 
and 26GB disk storage 
$50,595 for the RP7405 model 
with two CPUs, 4GB mem- 
ory and 146GB storage. 


John Miller, the worldwide 
server marketing manager 
HP’s Business Critical Systems 
Group, said the new line targets 
users that have tight bud- 
gets but still need increased 
processing capacity. 

the past, Miller said, 
managers have ranked perfor- 
mance, manageability and re- 
liability above cost when look- 
ing purchase servers. But 
the current sluggish econ- 
omy, cost has risen impor- 
tance, leading intro- 
duce servers that tout low 
price over cutting-edge tech- 
nologies, said. 


Good Enough 

Eileen Gibson, vice presi- 
dent Avnet Hall-Mark Inc., 
computer reseller Tempe, 
Ariz., agreed with the strategy. 
Rather than wait for better 
economic conditions, users 
might prefer with “good 
technology, even may not 
bleeding-edge,” she said. 

The systems make sense for 


users that don’t mind giving 
little return for good 
price, said Rich Partridge, 
analyst D.H. Brown Associ- 
ates Inc. Port Chester, 

“The economy has forced 
many customers very 
price-sensitive,” Partridge said. 
don’t think users are going 
find fixed, preconfigured set 
detriment they can get 
lower-priced server. 

“It’s like being willing 
the Saturday night stay-over 
you can save some money 
the trip,” added. 

And isn’t though HP’s 
new economy servers are no- 
tably inferior its regular 
models, said Joyce Becknell, 
analyst The Sageza Group 
Inc. Mountain View, Calif. 

The machines feature many 
the same functions found 


HP’s higher-end Superdome 
servers, including dynamic 
partitioning, 
agement and fault monitoring. 

addition, the systems are 
upgradable newer proces- 
sors, including Intel Corp.’s 64- 
bit Itanium chips, users can 
boost performance whenever 
they want, Becknell said. 


new Series 
features three models: 


RP2405 CAN HANDLE TO: 
Two processors 


memory 
146GB internal disk capacity 


RP5404 SUPPORTS TO: 
Four processors 


memory 
internal disk capacity 


RIING WITH LIP TO 
RP7405 RUNS WITH TO: 


Eight processors 


16GB memory 

Two hardware partitions 

Eight virtual partitions 

292GB internal disk capacity 


“What [HP has] done 
try and keep the functionality 
while getting the costs down, 
offering standard configu- 
rations,” Becknell said. 

Standard configurations are 
also easier for salespeople 
sell and for users under- 
stand, she 


Corrections 


The story “CPUs Cut the Power” 
page our Sept. issue 
incorrectly stated the lower end 
the power consumption for the 
Intel Banias microprocessor. The 
correct figure 380 milliwatts. 


The story “Filing Away” 
page the Sept. issue 
included incorrect information 
about the file systems supported 
Microsoft Windows 
NT. The native file format for 
Windows NTFS. While 
can also use file systems, 
FAT32 file systems can only 
set under Windows using 
third-party utilities. 


Server Sales Sink Deeper 


Revenues weaker amid market shuffling 


JAIKUMAR VIJAYAN 
Worldwide server revenues 


declined for the sixth quarter 


row $10.5 billion the 
second quarter, down 17% 


from $12.6 billion the same 


period last year, according 
IDC Framingham, Mass. 
Weak sales Japan and Eu- 


rope added revenue declines 


11% the U.S. and the 
Asia-Pacific region, excluding 
Japan, IDC said, although it 
added that those decreases 
were smaller than expected. 


Despite the softness the 
second quarter, year-over-year 


sales for the remainder 2002 
should near flat, the market 
research firm said. 

The second quarter also 
| marked the first time 
server market leader was chal- 
lenged another vendor. 


merging with Compaq Com- 


with each company garnering 


that 
HP, its first quarter after 


puter Corp., drew even with 
| IBM in overall server revenue, | 


28.7% market share, IDC said. 

But lost market share 
overall, when current revenue 
compared with the combined 
revenue and Compag last 
year for the same period, IDC 
said. added that sequen- 
tial basis, rivals IBM, Sun 
Microsystems Inc. and Dell 
Computer Corp. all saw in- 
crease revenue from the first 


quarter this year the sec- 


ond, even though the overall 
server market declined 
from quarter quarter. 

Gartner Dataquest unit 
San Jose also reported 
double-digit decline second- 
quarter server revenue. an- 
nounced that sales dropped 
13% year-over-year, from $11.6 
billion $10.1 billion. 
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little throughput. 
It’s time for Gigabit the desktop. 


The surge network applications has caused bottlenecks desktops everywhere. The solution? Help your 
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snnections 


etwork Conne 10/100 Mbps Cat-5 network, and will seamlessly ramp 1000 Mbps. When this Gigabit connection 


combined with the Intel® Pentium® processor, studies have demonstrated significant boost desktop 
performance. Intel, the leader desktop connections, makes multi-tasking less task cost-effectively 


and without any need for expensive rewiring. Intel? PRO Network Connections. The intelligent way connect. 
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Online ‘Training, E-Business 
Integration Yield Big Returns 


ROI study says CRM says CRM implementations 
among toughest for achieving payback 


THOMAS HOFFMAN 
NLINE LEARNING 
and e-business 
integration 
ects are deliver- 
ing the strongest 

returns investment for com- 

panies, while customer rela- 
tionship management (CRM), 
content management and on- 
line marketplace efforts are 


the bottom the list. 

Those findings are part 
ROI studies that Wellesley, 
Mass.-based Nucleus Research 
Inc. has done for users such 
Aetna Inc., Pfizer Inc., British 
Telecommunications PLC and 
Lockheed Martin Corp. 

For instance, according 
Nucleus, companies that imple- 


ment online training systems 
for “modest” five- six-fig- 
ure investment typically gener- 
ate strong financial returns 
cost reductions areas 
such travel, human resources 
overhead, regulatory compli- 
ance and customer support. 
Ian Campbell, co-founder 
and principal analyst the 
research firm, said e-business 
integration software such 
Microsoft Corp.’s BizTalk Serv- 
and BEA Systems Web- 
Logic Integration have helped 
companies leverage existing 


IBM Expands Identity Management Tools 


Acquisition adds 
Tivoli software line 


JAIKUMAR VIJAYAN 

IBM’s planned purchase 
software vendor Access360 
should significantly improve 
the security capabilities its 
Tivoli product line and poten- 
tially change the character 
the identity management mar- 
ket, according analysts. 

IBM last week said plans 
buy Irvine, Calif.-based Ac- 
cess360, which develops iden- 
tity management software, for 
undisclosed price. 

Upon regulatory approval 
the deal, which expected 
next month, privately held Ac- 
cess360 will join IBM’s $13 bil- 
lion software group. Its prod- 
ucts will become part the 
Tivoli portfolio, IBM’s line 
management software. 

software and 
services are aimed helping 
large companies automate the 
process granting, modifying 
revoking user access rights 
various applications based 
roles other policies. 

The deal brings new work- 
flow and self-service capabili- 
ties IBM’s aging Tivoli iden- 


tity manager technology, said 
Chris King, analyst Meta 
Group Inc. Stamford, Conn. 

“IBM knows this hot 
market, but the products that 
it’s had have been trailing for 
quite some time,” King said. 

For example, Tivoli’s identi- 
management software works 
only within the Tivoli frame- 
work, which makes less flexi- 
ble than many rival technolo- 
gies, said. purchasing 
Access360, IBM will get some 
the best technology this 
market, King said. 

time when demand for identity 
management software seems 
growing. Framingham, 
Mass.-based research firm IDC 
predicts that sales security 
management software, which 


New Identity 


What Access360 brings 
Tivoli portfolio: 


ENROLE: Software that central- 
izes control over user access rights 
based policies and user roles. 


PUBLIC PROVISIONING 
INFRASTRUCTURE: hosted 
identity management service deliv- 
ered jointly with VeriSign 


includes identity management, 
will grow 30% annually, from 
$550 million 2001 bil- 
lion 2006. 

Driving much the demand 
the growing need within cor- 
porations manage user iden- 
tities easier and more cost- 
efficient manner, said James 
nata Inc. Nashua, N.H. 

Currently, wide variety 
point products available 
help address different parts 
the identity management prob- 
lem. Companies such Neteg- 
rity Inc. Waltham, Mass., sell 
Web access control software. 
Directory 
nologies are available from 
vendors including Oblix Inc. 
Cupertino, Calif., while compa- 
nies such Courion Corp. 
Framingham have developed 
password reset and user man- 
agement technologies. 

“What you have com- 
mon pain point with incredibly 
varied solutions,” said Pete 
Lindstrom, analyst Hur- 
witz Group Inc., Framing- 
ham. But that may change, 
added, more vendors offer in- 
tegrated identity-management 
suites like the one IBM at- 
tempting gain with its pur- 
chase 


investments their infra- 
structures through both inter- 
nal links and business-to-busi- 
ness connections. 

Many the returns from 
such projects result from 
streamlining data flows be- 
tween applications and access 
broader set information 
for end users, according the 
Nucleus assessment, which 
due released this week. 

could see where e-busi- 
ness integration would offer 
strong results, because 
streamlining operations and 
taking out redundancies,” said 
Steve McDowell, information 
services director retire- 
ment home operator the Pa- 
cific Northwest. asked that 
the company not identified. 

the other end the 
scale, CRM projects typically 
fall short ROI projections, 
Campbell said. Companies of- 
ten overbuy the amount 
CRM applications they need, 
said. And business require- 
ments often change the time 
multiyear CRM implementa- 
tions are completed, added. 

The CRM findings jibe with 
the experiences Rick Peltz, 
CIO Marcus Millichap 
Real Estate Investment Broker- 
age Co. Encino, Calif., but 
for different reasons than the 
ones cited Campbell. Peltz 
said has witnessed the 
shortcomings CRM systems 
both Marcus Millichap 
and Bank America Corp. 

Six years ago, when Peltz 
America prior its merger 
with NationsBank, the com- 
pany deployed CRM system 
aimed sharing client infor- 
mation throughout its North 
American wholesale banking 
division. However, Peltz said, 
the system “went belly up” 
eight months after going live. 
“No one used it,” he said. 
“When dealing with 
salespeople and agents, their 
client list their lifeline.” 

That also helps explain why 
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Leaders 
And Laggards 


THE TOP PERFORMERS 
E-business integration tools: 
Can reduce costs, increase corpo- 
rats performance and, ultimately, 
generate new revenue streams. 


E-learning systems: Benefits 
include reduced costs and oper- 
ational improvements such as 
increases productivity. 


LESS SUCCESSFUL 
Business-to-business mar- 
ketplaces: Have produced limit- 
returns; companies would have 
been better off integrating sys- 
tems with those key business 
partners. 


Monolithic CRM systems: 
Consulting and software costs 
can outweigh financial returns, 
and deployment process 
often slows payback. 


Stand-alone content manage- 
ment tools: Improved functional- 
ity Web server and portal soft- 
ware reduces the financial appeal 
stand-alone products. 


SOURCE: NUCLEUS RESEARCH INC.. 
WELLESLEY. MASS. 


Marcus Millichap’s 650 
agents have resisted overtures 
made Peltz and his team 
install nationwide CRM sys- 
tem for sharing information 
about their clients, said. 

Many stand-alone content 
management systems also fail 
generate strong returns, ac- 
cording the Nucleus report. 
Content portals and applica- 
tions that are narrowly focused 
and tightly integrated with 
other systems are more likely 
yield returns, Campbell said. 

For Jim Albin, CIO Mercy 
Health Partners Western 
Toldedo Ohio, any content 
management project has 
focused business processes. 

“The things that alter work- 
flows and improve the process 
downstream are the true ROI 
generators,” not the technol- 


PAYBACK TIME 


For more on IT return-on-investment issues, 
go to our ROI Knowledge Center: 


QuickLink k2340 
www.computerworld.com 
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Microsoft Warns 
Windows, Mac Holes 


Microsoft Corp. has begun releasing 
a series of software patches de- 
signed plug security hole all 
of its current Windows releases that 
could let attackers issue bogus digi- 
tal certificates. The flaw also af- 
fects the Macintosh versions of Of- 
fice, Internet Explorer and Outlook 
Express. Microsoft gave the vulner- 
ability its highest severity rating and 
urged managers install the 
patches as soon as possible. 


Cisco Finds Security 
Flaws VPN Tools 


Cisco Systems Inc. issued pair 
security advisories warning users 
about multiple vulnerabilities in its 
VPN 3000 line of virtual private 
network (VPN) concentrators and 
its VPN Client software. Cisco said 
has released updated versions 
the products that address the flaws. 
It also detailed work-arounds that 
can mitigate some of the problems. 


Intel Sells Off Network 
Management Tools 


Intel Corp. said has agreed spin 
off its LANDesk line network 
management tools into a new com- 
pany that will funded mainly 
two venture capital firms. Intel plans 
to keep a minority ownership stake 
in the LANDesk business, which will 
based the Salt Lake City area. 
intel also lowered its third-quarter 
revenue forecast slightly, citing 
weak microprocessor sales. 


Short Takes 


NOVELL INC. announced that it has 
cut the cost of licensing fees for 
companies and government agen- 
cies that use its software offer 
Internet-based services con- 
sumers. HEWLETT-PACKARD 
CO. released new processors and 
an operating system update for its 
e3000 server line, which due 
discontinued October 2003. 


Utility-based Deal Cuts 
Costs 


IBM ties U.S. Open 
Web site service 
fees daily usage 


THOMAS HOFFMAN 
FLUSHING MEADOW, N.Y 
THIS 
U.S. Open tennis 
tournament here, 
the organization 
that governs the 
sport the tried ace 
out high costs joining the 
burgeoning move toward utili- 
ty-based computing. 

The United States Tennis 
Association (USTA) struc- 
tured utility-based contract 
with IBM cover the opera- 
tion of its www.usopen.org 
Web site during the tourna- 
ment, which was scheduled 
conclude yesterday. Under the 
contract, the pay 


IBM for Web hosting, content 
caching and Web-site perfor- 


mance measurement services 
based on its average utilization 
over a 24-hour period. 

The deal was set help 
the USTA handle surges 
Web site traffic reasonable 
cost level, said Ezra Kucharz, 
managing director advanced 
media the White Plains, 


N.Y.-based USTA. The associa- 


tion typically has increase 
its online capacity 50-fold 
meet the demand for informa- 
tion during the two-week tour- 
nament, according Kucharz. 


Cost-Effective Model 
Switching 
based approach was “definitely 


amore cost-effective model for 


us,” he said. “It wouldn’t make 
sense for us to invest in [new 
technology for] two-week 
event on an annual basis.” 

IBM and the USTA didn’t 
disclose the financial details 
the contract. Dev Mukherjee, 
vice president strategy and 
marketing for IBM’s E-Busi- 
ness Services Demand 
group, said only that the deal 


was customized agreement.” 

But utility-based computing 
isn’t just restricted niche ap- 
plications such 
sporting events. For example, 
IBM also provides computing- 
on-demand services large 
corporate users such as Ameri- 
can Express Co., Saks Inc. and 
The Dow Chemical Co. 

the seven-year, billion 
outsourcing and services 
agreement signed with New 
York-based Amex February, 
IBM supplying mainframes, 
storage and other processing 
resources, well technical 
support, as-needed basis 
27619]. 

IBM rivals such Plano, 
Texas-based Electronic Data 
Systems Corp. are also offering 
approaches 
services. Utility-based com- 
puting “might its infancy, 


but makes great deal 
sense,” said Jeremy Grigg, 
Gartner Inc. analyst who 
works New York. That could 
lead significant transfor- 
mation the delivery com- 
modity services the future,” 
Grigg added. 

the case the USTA, IBM 
has managed the U.S. Open’s 
site and scoring system 
for the past seven years. The 
USTA runs its own Web 
servers months per year, but 
turns them over IBM just 
prior the tournament, said 
IBM executive Edward Curry. 

IBM moves portions the 
content-serving work- 
load onto its Intel-based Net- 
finity servers, which cache the 
information peripheral net- 
work points enable efficient 
content processing. During 
peak demand times, load bal- 
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The USTA’s pay-as-you-go pact 
makes handling traffic spikes 
its Web site more cost-effective. 


ancing 
IBM servers and 
Intel-based xSeries boxes run- 
ning Linux helps partition pro- 
cessing requests, IBM said. 
Kucharz wouldn’t quantify 
the amount traffic the Web 
site was experiencing for this 
year’s tournament, but said 
was from last year, when the 
site had nearly million user 
visits and served more than 172 
million pages information. 


Microsoft Plans Storage Management Software 


servers disk arrays 


LUCAS MEARIAN 
Microsoft Corp. last week an- 
nounced storage management 
software that will let systems 
running Windows 2000 Server 
and 
Server 2003 
cate with storage arrays 
across multiple devices 
supported more 
than dozen leading vendors. 
Microsoft’s Multipath 
technology will ship de- 
vice development kit third- 
party partners such EMC 
Corp., Hitachi Ltd., Hewlett- 
Packard Co., Network Appli- 
ance Inc. and Veritas Software 
Corp. Microsoft said the tech- 
nology allows more than one 
physical path used ac- 
cess storage devices, providing 
improved 
via fault tolerance and load 
balancing traffic. 


STORAGE 
MARKET 


Multipath I/O is due to ship 
year’s end with both Win- 
dows 2000 and Windows .Net 
Server 2003, which sched- 
uled for release then well. 

Anders Lofgren, analyst 
Giga Information Group Inc. 
Cambridge, Mass., 
venture into stor- 
age software welcome de- 
velopment. 

“It should ease inte- 
gration issues terms 
providing high avail- 
ability and functionali- 
through multipathing for 
Windows environments,” Lof- 
gren said. “Anything that can 
done improve that area 
good thing.” 

More than dozen vendors 
have committed developing 
products that will use Multi- 
path I/O deliver capabilities 
such fail-over, load balanc- 
ing and interoperability with 
third-party storage products 
such host bus adapters and 
RAID arrays, Microsoft said. 

Rakesh Narasimhan, general 


manager of strategic partner- 
ships Microsoft, said storage 
vendors that use the technolo- 
can expose the different be- 
haviors their hardware 
through application pro- 
gramming interface and deliv- 
the I/O software through it. 

standards and interop- 
erability path between them 
and us. Windows, can 
guarantee level service 
with their products,” said. 

However, others criticized 
the software because works 
only with Microsoft’s operat- 
ing systems. 

“It’s wonderful start 
they try get into storage big 
time, but they have some chal- 
lenges because ... doesn’t 
address the non-Windows 
platforms,” said Bob Zimmer- 
man, analyst Giga. “No 
true-blue IBM shop 
Microsoft shop anymore.” 


MORE THIS ISSUE 


For more about storage management, see 
related story on page 21. 
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SEE THE TECHNOLOGIES OTHER 


COMPANIES WILL “INVENT” 2005. 


2002 Conference this year’s must-attend 


event for anyone with stake the network’s future. 
Especially those using Sun make the net 


work for their business. 


SunNetwork 2002 Conference will more than just 
seminar trade show. will window into the 
network’s next decade. Where technology professionals 
will gather hear insider perspectives and insights 
into where the network going. And where developers, 
engineers and managers can gain the knowledge 


they need further their careers: 


oper 
Platform 


©2002 Sun Microsystems, Inc. Ail rights reserved. Sun, Sun Microsystems, the Sun logo and SunNetwork are trademarks or registered trademarks of Sun Microsystems, Inc. in the United States and other countries. Register by 


August 31, 2002, for $795 — $200 off the onsite registration price of $995. 


September 18-20 Moscone Center 


SunNetwork: 


Choose from more than 150 in-depth technical sessions 
featuring best practices network identity, security, 
mobility, Web services and data center management. 

° Hear keynotes from Scott McNealy, Bill Joy and 
James Gosling, among others. 

Get sneak peeks revolutionary technologies and 
products from Sun. 

Get edge over your competition with training and 
practical information from Sun and our partners. 

Win $50,000 the SunNetwork Coding Challenge 
programming tournament. 


For more information about SunNetwork 2002 Conference, 
including online registration, sun.com/sunnetwork 


San Francisco 


2002 Conference and Pavilion 
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Muted 
Lacks Major Rollouts 


Networking industry downturn, Sept. 
anniversary weigh trade show 


MATT HAMBLEN 
Interop Atlanta 
2002 trade show 
scheduled open 
today amid linger- 
ing worries about the financial 
health the networking in- 
dustry and some about 
physical security issues during 
the first anniversary the 
Sept. terrorist attacks. 

The crowds and the number 
exhibitors’ booths will 
down from previous fall 
shows, vendors 
ence sponsors said last week. 
But, they added, the attendees 
who show are expected 
who control their companies’ 
spending budgets, rather than 
lower-level workers. 

“My hope for strong re- 
gional attendance and not em- 
barrassingly small crowds, but 
think conference attendance 
generally going start drift- 
ing back up” after more than 


year declines various 
events, said Craig Mathias, 
analyst Farpoint Group 
Ashland, Mass., and sched- 
uled N+I speaker. 

The hottest areas empha- 
sis will network security 
and wireless networking, said 
show organizers. However, few 
the big-name networking 
vendors plan announce ma- 
jor new products 

For example, Cisco Systems 
Inc. have corporate 
presence the conference; in- 
stead, its booth will limited 
its businesses the Atlanta 
region, and spokesman said 
the company introduce 
any products services. 

Computer Associates Inter- 
national Inc. among the 200 
the company was listed 
show sponsor 
terop Worldwide planning 
unveil several products, 
spokeswoman for Islandia, 
based said that isn’t the case. 


ance 


Atlanta 
2002 Details 


Expected attendance: 20,000 to 
30,000 attendees and 200 exhibitors 


Major technology themes: Security, 
wireless networks, voice over IP tech- 
nology, storage 


Keynotes speakers (all on Tuesday): 
Ronald LeMay, president of Sprint Corp.: 
Bobby Johnson, president and CEO of 
Foundry Networks Inc.; Robert Shaner, 
president of Cingular Wireless 


Meanwhile, struggling ven- 
dors such Lucent Technolo- 
gies Inc. Murray Hill, NJ., and 
Nortel Networks Ltd. Bramp- 
ton, Ontario, are sending only 
speakers the conference. 
Nortel spokesman said the com- 
pany tends emphasize the 
spring N+I show Las Vegas. 

Sprint Corp. one the few 
major telecommunications car- 
riers scheduled have booth 
this week’s event. recent 
years, the fall N+I show has 
been good place meet en- 
terprise buyers, said Barry 
Tishart, director data prod- 
uct management Sprint, 
which will demonstrate some 


IP-based network services that 
unveiled earlier this year. But 
the likely turnout this week’s 
conference “is million-dollar 
question,” Tishart added. 

Valerie Williamson, 
dent Foster City, Calif.-based 
NetWorld+Interop Worldwide, 
subsidiary Key3Media 
Group Inc. Los Angeles, said 
she expects 20,000 30,000 
people attend the confer- 
ence. Last year’s Atlanta show 
opened Sept. and drew 
total about 20,000 attendees. 

special Comdex Atlanta 
being combined with this 
developers and executives 
beyond the usual network 
managers, Williamson said. 
Comdex Fall will held Las 
Vegas November. 

Evan Sohn, vice president 
marketing ReefEdge Inc. 
Fort Lee, said the company 
plans staff booth the 
show and announce wireless 
LAN management 
(see story right). “No doubt 
will impact attendance, 
but it’s still worth going for 
generate business, have one- 
on-one meetings and support 
our partners,” Sohn said. 


CONNECTION MADE 


For more networking coverage. visit our 
Knowledge Center: 


QuickLink: k1200 
www.computerworld.com 


WorldCom 


Adds support for 
Cisco routers 


MATT HAMBLEN 
WorldCom last week an- 
nounced series additions 
its global virtual private net- 
work (VPN) offerings, includ- 
ing IP-based VPN service 
that uses routers made Cis- 
Systems Inc. 

The new capabilities include 
service that provides access 
frame-relay networks via World- 
Com’s IP-based 
work, plus Ethernet and Digital 
Subscriber Line (DSL) access 
options for VPN users. 


Broadens 


Such services were designed 
available the struggling 
company’s customers, said Jim 
DeMerlis, vice president 
product management World- 
Com. “There such thing 
one-size-fits-all VPN,” 
DeMerlis said. 


Service Expansion 

The Cisco-based VPN 
available immediately the 
US. for monthly fee $1,895 
per site for link. World- 
Com has been offering 
VPN service that uses routers 
made Lucent Technologies 
Inc. for the past ihree years. 
But DeMerlis said the Cisco 


Services 


technology should expand the 
service into more applications. 
Daniel Mittler, director 
technology and systems 
Realm Business Solutions Inc., 
said the developer applica- 
tions for real estate agents has 
been using 
VPN service Lucent routers 
since March. Using the VPN 
instead frame-relay connec- 
tions lowered monthly 
network costs from $45,000 
$12,000, according Mittler. 
Mittler said might make 
sense for Realm switch 
the Cisco routers, since Realm 
primarily Cisco shop. But 
said there’s urgent need 
change the VPN the com- 


pany, which moving its head- 
quarters from New York Dal- 
las the end next month. 
Mittler said he’s pleased 
with WorldCom’s service lev- 
els, despite the network opera- 
tor’s financial difficulties and 
Chapter bankruptcy protec- 
tion filing. “They won’t turn 
down the lights,” said. 
Realm used the former Exo- 
dus Communications Inc. 
network service provider until 
that company filed for bank- 
ruptcy protection last fall and 
sold most its assets Cable 
Wireless PLC. Although 
WorldCom has also filed for 
Chapter ll, Mittler said his 
experience with the events 
Exodus has made him less 
anxious because Realm wasn’t 
hit any service disruptions 
before changing carriers. 


COMPUTERWORLD September 2002 


Some Vendors 
Plan 
Announcements 


Even though many vendors are 
worried that 
Atlanta 2002 might light 
attendees, the following net- 
working equipment makers and 
network operators plan to an- 
nounce products and services 
the conference: 

conjunction with Boulder, 
Colo.-based SpectraLink 
Fort Lee, N.J.-based 
ReefEdge Inc. plans introduce 
Version 3.0 its ReefEdge 
Connect system for security and 
management wireless LANs. 
The upgrade will add support for 
managing line 
wireless phones, 
ReefEdge said. 

Sym- 
bol Technologies Inc. will 
formally announce its Mobius 
WLAN architecture, which puts 
wireless LAN security and man- 
agement capabilities central 
switch instead individual 
wireless access points 
Link 32531]. 

Proxim Corp. Sunny- 
vale, Calif., will demonstrate 
$249 kit announced last week 
upgrade wireless 
networks include support for 
the newer and faster 
technology. 

Proxim also unveiled Tsunami 
QuickBridge, outdoor wire- 
less bridge that uses the 5.8- 
GHz band connect two build- 
ings up to six miles apart as a 
quick replacement for 
leased line. Tsunami 
range price from $3,500 
$5,500. 

Amsterdam-based Equant 
said will announce man- 
aged service that provides data, 
voice and video capabilities 
VPNs. 

Equant won't have booth 
but will meet 
with attendees detail its global 
service, which uses ports 
Cisco routers segregate data, 
voice and video traffic from one 
another. Equant officials said 
they have signed compa- 
nies use the service, but they 
identify any them. 

Matt Hamblen 
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Dell Installs Big Cluster 
Servers, Looks Web Sales 


systems envisioned, but plans aren’t set 


BOB BREWIN 
ELL COMPUTER 
Corp. last week 
announced the 
installation the 
second-largest 
server cluster sold date un- 
der high-performance com- 
puting initiative launched 
February. And Dell executives 
said users will eventually 
able order such systems via 
the company’s Web site. 

The Linux-based cluster 
bought for the State University 
New York’s Buffalo campus 
includes about 2,000 Dell’s 
PowerEdge servers, with com- 
bined total more than 4,000 
Intel processors. The system, 
valued $13 million $14 mil- 
lion, supported storage- 
area network with more than 
16TB disk storage (see box). 

The clustered supercomput- 
can process 5.7 trillion 
floating-point operations per 
second and was designed for 
use bioinformatics research 
the Buffalo campus, includ- 
ing analysis what the pro- 
teins different parts the 
human genome do. 

Thus far, the 
stalled the school known 
officially the University 
Buffalo surpassed only 
that Dell sold Paris- 
based Compagnie Generale 
Geophysique for analyzing seis- 
mic data part oil ex- 
ploration activities [QuickLink 
cently updated to include 4,096 
processors, Dell said. 


for Dell? 


Such high-performance clus- 
ters are seemingly far removed 
from the desktops, laptops and 
low-end servers for which Dell 
best known. But Reza Rooho- 
lamini, Dell’s director oper- 
ating systems and clusters, said 
the day will come when the 


server clusters can ordered 
via the Web. 

Rooholamini didn’t say when 
that likely happen and con- 
ceded that cluster “is more 
complex from 


similar point during inter- 
view last month [QuickLink 
32329]. said doesn’t view 
the clusters being much dif- 
ferent from other products. 
“All technology over time com- 
moditizes its simplest level,” 

Dell said. 
Mark Melenovsky, analyst 
Framingham, Mass.-based 
IDC, called the sale 


ordering standpoint 
than 
PC.” But, said, “it 
basically uses the 
same piece parts 
our servers. are 


BOXES AND BOXES 


For more coverage of server 
technologies, visit our 
Hardware Knowledge Center: 


QuickLink k2200 
computerworld.com 


large-scale clus- 
ter computers “the 
only bright spot 
the server market” 
this year. IDC re- 
ported two weeks 


just taking these 
parts and building blocks and 
connecting them into super- 
computer.” 

Michael Dell, the company’s 
chairman and CEO, made 


ago that total world- 
wide server sales fell 17% 
year year the second 
quarter. But Melenovsky said 
has seen boom the sale 
large clusters with hundreds 


thousands nodes. 

Nonetheless, added that 
it’s bit stretch” for Dell 
believe can take its build- 
to-order model the super- 
computer level. Melenovsky in- 
stead predicted the growth 
boutique services industry 
help users handle the complex 
ordering and installation 
large clusters. 

for Dell 
wouldn’t specify how many 
large clusters the company has 
sold this year. But she said Dell 
has installed “hundreds clus- 
ters” altogether, including 
least systems that each have 
more than 100 server nodes. 

Jeffrey Skolnick, director 
the Buffalo Center Excel- 
lence Bioinformatics the 
university, said his team re- 
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Big Cluster 
Campus 


The Dell server cluster 
installed the University 
Buffalo includes the fol- 
lowing technologies: 

More than 2,000 Power- 
Edge 2650 and PowerEdge 
1650 servers, equipped with 
more than 4,000 Intel chips 


Red Hat's Linux and Platform 
LSF cluster work- 
load management software 


storage-area 
network built around EMC 
storage devices and Extreme 
Networks’ BlackDiamond 
switches 


searchers will use the cluster 
installed the Buffalo cam- 
pus conduct research work 
that could eventually lead 
the development drugs for 
combating cancer, Alzheimer’s 
disease and 


Oracle Releases Software 
Licensing Guide for Users 


Pulls together info 
its pricing, but 
policies unchanged 


JORIS EVERS 
promised, Oracle Corp. last 
week made guide its soft- 
ware licensing policies avail- 
able its Web site and said 
the 40-page document should 
answer 90% the ques- 
tions users have about the 
company’s pricing models. 

The Software Investment 
Guide doesn’t include any 
changes Oracle’s licensing 
plans provide information 
that wasn’t already available, 
according users and analysts 
who reviewed draft versions. 
But does pull together licens- 
ing details that were previous- 
found various documents. 

Tom Wyatt, president the 
independent Oracle Applica- 


tions Users Group Atlanta, 


said the guide encompasses 
licensing areas that were cov- 
ered “20 30” separate 
documents until now. 

“It provides great resource 
for users understand the ter- 
minology software pricing 
and how that applies 
organization’s structure,” said 
Wyatt, who director Ora- 
cle systems Sitel Corp., 
customer service outsourcing 
firm Baltimore. 


Customer-Driven 

Oracle first announced plans 
for the guide its European 
OracleWorld conference 
June, shortly after some the 
company’s licensing policies 
were criticized users and 
analysts [QuickLink 30999]. 
Jacqueline Woods, Oracle’s vice 
president global pricing and 
licensing strategy, said the guide 
direct response the 
criticism, but she added that 


customer requests prompted 
the company create it. 
“Customers, some them 
may have felt that were not 
clear should have 
been, and felt that was 
important provide that clar- 
ity,” Woods said. “There was 
sentiment that people could 
not find the information, did 
not know where was, 
thought was hard get to.” 
Jane Disbrow, Gartner Inc. 
analyst based Columbus, 
Ga., said the draft version 
the guide she read “was pretty 
much exactly what already 
available the Internet, just 


appreciate the 
opportunity 
not have talk 

salesperson. 


TOM WYATT, 
PRESIDENT, ORACLE 
APPLICATIONS USERS GROUP 


that now one document 
that you can print out.” 

Though the guide gives users 
high-level overview Ora- 
cle’s pricing policies, man- 
agers able deter- 
mine what the best way would 
ware] environment just 
reading the guide,” Disbrow 
said. “There are secrets 
it, surprises.” 

But Wyatt said the docu- 
ment could help potential cus- 
tomers make their minds 
about contracts without being 
led Oracle’s sales force. 
appreciate the opportunity 
not have talk salesper- 
son,” said. “As user, can 
more prepared dealing 
with salesperson and po- 
tentially purchasing licenses 
through the Internet.” 

Wyatt had only one sugges- 
tion for Oracle: Update the 
guide needed keeps its 
value users. “The document 
should not become stale,” 
user tool, important that 
continuously updated.” 


Evers writes for the IDG News 
Service. 
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largest Telephony networks. 


Billions watched the FIFA World Cup™ the vital voice 
and data from the world's largest sporting event was sent 
over one the world’s largest converged networks, designed, 


built and maintained Avaya. Typically 12-month project, 


was completed just four, and saved hundreds thousands 


dollars costs. Our Telephony solutions handled close 100,000 


phone calls per day and peak data traffic four times that 
typical FORTUNE 500° company. Working with international partners 


and venues two countries, Avaya, global leader voice and data 


networks, delivered practically flawless performance. Utilizing the experiise 


our Global Services organization and patented Avaya EXPERT Systems™ 


diagnostic tools, 99.999% packets were transmitted securely and 


reliably with virtually zero downtime. See what Avaya can for your business. 
For case study the FIFA Worid Cup™ network, visit avaya.com/nowtwo 
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With Avaya, you’re already this close Telephony. 


Because Avaya, the leader voice solutions, has opened the world Telephony any 


business. fact, our feature-rich MultiVantage™ software works open architecture. This allows you 
utilize your existing investment both Telephony and LAN switches, while extending Enterprise 
Class Solutions anywhere your network. you get the flexibility deploy new capabilities 


exactly where they’re needed while leveraging your current network and applications investments. 
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Departure 
From Veritas 
Continues Spate 


Exec Changes 


LUCAS MEARIAN 
Veritas Software Corp.’s chief technol- 
ogy officer resigned late last month, 
continuing series high-level man- 
agement changes that began early this 
year the storage management vendor. 

Analysts said nearly dozen execu- 
tives have left Mountain View, 
based Veritas during the past six 
months. the same time frame, the 
company has brought several new 
senior managers run 


sign that Veritas falling apart, accord- 
ing Peterson. “It’s normal transition 
that occurs when you change top 
execs,” said. 

But Anders Lofgren, analyst 
Giga Information Group Inc. Cam- 
bridge, Mass., said Veritas under 
more pressure from competitors such 
EMC Corp., Sun Microsystems Inc., 
Mountain View, Calif.-based Legato 
Systems Inc. and even Microsoft Corp., 
which last week announced the first 
promised line storage management 
software for Windows systems. 

think there’s still good technology 
coming out Veritas, but they are feel- 
ing the heat more than they have 
the past,” Lofgren said. 

The latest executive leave Paul 
Borrill, who said he’s stepping down 
chief technology officer Veritas 
start his own company. 

felt like wouldn’t doing any 
harm Veritas left now,” Borrill 

said. “We intend 


its product and marketing STORAGE DOWNLOAD continue have strong 


operations and its merger 
and acquisition activities. 


For full coverage of storage 
and issues, head our 
The dramatic shift Knowledge Center: 


upper management fol- QuickLink k1700 


relationship.” 

Borrill, whose last day 
Veritas was Aug. 29, 
wouldn’t disclose details 


lows $651 million net www.computerworld.com about the technology that 


loss last year and CEO 
Gary Bloom’s assumption the chair- 
man’s position January. Bloom took 
over that job from Mark Leslie, whom 
replaced president and CEO 
November 2000. 

Veritas officials and industry analysts 
alike described the overhaul natur- 
result the ascension Bloom, 
former Oracle Corp. executive, the 
top three jobs the company. 

“Seven vice presidents left one 
week April,” said Michael Peterson, 
analyst Strategic Research Corp., 
storage management market research 
firm Santa Barbara, Calif. “This 
Gary’s operating style: replace Mark 
Leslie’s executive operating team.” 

Veritas spokesman said via e-mail 
that Bloom has brought manage- 
ment team that “he’s very confident 
New members include Mark 
Bregman, longtime IBM executive 
who was hired Veritas February 
oversee product operations, and Jere- 
Burton, another Oracle veteran who 
was named chief marketing officer 
Veritas April (see box). 

Veritas, one the biggest vendors 
storage management software, had 
$1.5 billion revenue last year. the 
wake its big loss for 2001, the com- 
pany July reported net profit 
$70.5 million revenue $735.1 mil- 
lion for the first half this year. 


The management overhaul isn’t 


his new company will 
focus say whether Veritas help- 
ing fund the venture. 

Veritas said permanent replace- 
ment for Borrill hasn’t been named yet. 
Fred van den Bosch, executive vice 
president product strategy and new 
product initiatives, will take over Bor- 
rill’s job responsibilities for now. 


Comings and Goings 
The management changes Veritas 


include the following: 
IN? 


Mark Bregman, executive vice president 
product operations, including engineering 
and product management 


Jeremy Burton, chief marketing officer 
Paul DiNardo, vice president corporate 
development 
WHO'S OUT? 


Paul Borrill, chief technology officer 


Michael Howard, vice president and 
general manager the internet 
division 

Prashant Dholakia, senior vice president 
the availability products group 


Neal Ater, senior vice president the data 
protection products group 


Telephony. 


Where start? 
With Avaya Enterprise Class 
Solutions (ECLIPS) 
featuring 
start anywhere 


your network. 


$8700 Media Server 
the core. 
users 


G700 Media Gateway 
the edge. 
Survivabie remote location 
Standards-based distributed 
architecture 
Cost-effective option 


From iP Phones to Pocket PCs 
With specific workgroup. 
¢ First to seamlessly extend 
applications cellular 
Takes applications remote 
and mobile workers for 
greater productivity 


To begin assessing your network, contact us at 


866-GO-AVAYA. Or learn more at avaya.com/yes 
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When .NET connected software helps you quickly connect islands data into one clear picture for your employees, that’s 


one degree separation. All too often, data critical internal decision-making scattered throughout your enterprise, and you need 


collect and present way that makes sense—quickly. Microsoft® SQL Server™ 2000 Enterprise Edition with Analysis Services unifies and 


analyzes data from various systems using Data Mining and Data Transformation Services. Analytics built into Data Analyzer make information 
available immediately the employees who require it, way that makes decision-making easier and more effective. And that’s important, 
because when vital decisions are put off, are profits. That’s one degree separation. That’s business intelligence with .NET. Find out how 


.NET connected software can help you see the big picture. microsoft.com/enterprise Software for the Agile Business. 


© 2002 Microsoft Corporation. All rights reserved. Microsoft and Windows are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries. The names of actual companies and products mentioned herein may be the trademarks of their respective owners. 
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CompUSA used Microsoft SQL Server 2000 with Analysis Services and Data Transformation Services to extract point-of-sale 


data from 228 stores, 150 applications, and numerous databases, and then integrate the information into one data warehouse. 


Now, not only are employees able get clearer picture the business large, but the 


} quick delivery of data means they can adjust to meet opportunities as they knock. 
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TODD WEISS 
Hershey Foods Corp. ran into major 
problems when deployed SAP AG’s 
R/3 software and other business appli- 
cations three years ago. But the candy 
maker had better luck with upgrade 
the Web-enabled version R/3. 

Hershey late last month said the up- 
grade its enterprise resource plan- 
ning (ERP) system R/3 4.6 was com- 
pleted 20% under budget 
and without any of the or- a 
der processing and prod- APPLICATION AWARE 

For more on business applications, 
uct-shipment disruptions our Chain 
that marred the initial $112 Center 
million rollout k2000 
upgrade began in July 2001 www.computerworld.com 
and was finished May, 
the Hershey, Pa.-based company said. 

Hershey said was able make 
more than improvements its core 
business processes within days 
going live with R/3 4.6, which part 
SAP’s mySAP.com product line. The 
company cited enhancements such 
the automation pick-list processing 
and materials management invoice ver- 
ification, processing for dis- 
tributors military customers. 

Those improvements have helped 
reduce costs and speed processing 
times, Hershey said statement. 
The company added that has also 


Bankrupt Trucking Company 
Spares Half Staff For Now 


solidated Freightways, said the rest 
the staff was laid week part 
cutback that affected about 12,400 
the company’s 15,500 employees. The 
company hasn’t yet determined how 
long the remaining workers will 
keep their jobs, Brown said. 

However, Consolidated Freightways 
noted that all the employees who are 
still its payroll will phased out 
“expeditious shutdown.” The com- 
pany said that doesn’t have the finan- 
cial resources continue operating. 

The liquidation process will include 
sell-off Consolidated Freightways’ 
technology assets, Brown said. 

Despite the planned shutdown, the 
company said its CFAirFreight and 
Canadian Freightways Ltd. subsidiaries 
will continue operate stand-alone 
businesses. Those units have their own 
staffs, Brown 


“achieved produc- 
tion environment” with R/3 4.6 and 
using SAP’s business analysis tools 
measure the impact sales and mar- 
keting programs they happen. 

Hershey officials declined com- 
ment beyond the statement issued 
about the upgrade. the statement, Joe 
Zakutney, director the SAP upgrade 
program, said Hershey’s staff was 
able exceed its deliv- 
ery commitments for the 
project because “strong 
program management and 
executive leadership, dili- 
gent planning and 
extensive testing and 
training plan.” 

Joshua Greenbaum, analyst En- 
terprise Applications Consulting 
Daly City, Calif., said Hershey’s experi- 
ences illustrate the fact that most trou- 
bled ERP rollouts are caused project 
management issues, not faulty software. 

Despite the initial problems, Hershey 
stuck with R/3 because recognized 
that could get lot business value 
from the technology “if they bothered 
right,” Greenbaum said. 

fall 2000, Hershey said that had 
fixed most the initial problems with 
the ERP system. 

For the upgrade, the company enlist- 


LINDA ROSENCRANCE 
Half the 120 workers Consoli- 
dated Freightways Corp. were kept 
the job when the Vancouver, Wash.- 
based trucking company shut down 
most its operations last week. But the 
reprieve will only temporary. 

which 
plans liquidate its assets under Chap- 
ter bankruptcy protection, said the 
remaining employees are needed 
support key technology systems that 
will remain operational until final de- 
liveries are made customers. 

For example, the company said will 
continue send electronic data inter- 
change transmissions customers and 
will still let them track shipments via its 
Web site. secure portion the Web 
site will also continue available 
customers, the company added. 

Mike Brown, spokesman for Con- 


that there was “some pain involved” 
Hershey’s initiai installation. “This has 


Hershey Upgrades R/3 ERP System Without Hitches 


the help SAP and Accenture Ltd. 


often been case that’s cited for past 

larly pleased” about the upgrade 
process, 


SAP spokesman acknowledged 
Reporter Marc Songini contributed 
this story. 
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NEWS 


MARYFRAN JOHNSON 


Once Again, Responds 


HEN POSTED our Sept. 
aftermath survey Computer- 
world.com few weeks ago, had 
wonder anyone would even 
respond. There’s such feeling 


national exhaustion 
the air approach 
this dreaded first an- 
niversary. beleaguered 
they are with con- 
strained budgets and 
continuing security wor- 
ries, would profes- 
sionals willing an- 
swer yet another round 
questions about the 
ongoing impact 9/11? 
Indeed you were, and 
once again, you respond- 
ed. Some 2,620 you both man- 
agement and staff generously took 
the time give feedback about 
the sorry state spending se- 
curity today (see story, page 6). Only 
half our respondents said their 
companies had launched new proj- 
ects improve data security re- 
sponse the terrorist attacks, while 
41% noted that nothing had changed. 
their credit, most firms (61%) 
were managing keep other 
projects track, regardless the 
additional security demands, al- 
though substantial 23% our sam- 
ple was forced cancel postpone 
such projects. The weighty responsi- 
bility keeping business networks 
and data safe has never felt heavier. 
“Initially, there was great fervor 
about security and business continu- 
ance,” Meta Group analyst Mark 
Shainman told our reporter Mark 
Hall. But those good intentions be- 
gan fade the face recession- 
ary budget realities, coupled with 
the hope that existing security plans 
would provide enough protection. 
Perhaps they will. But it’s more 
frightening gamble than corporate 
America usually willing take. 
Researchers Gartner estimated 
last year that 60% U.S. businesses 
particularly those that rely heavily 
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MARYFRAN JOHNSON is 
editor in chief of Comput- 
erworld. You can contact 
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computerworld.com. 


their infrastruc- 
tures haven’t spent 
tinuity disaster recov- 


ery guarantee their 
own survival. And an- 
other poll released this 
month CSO magazine 
new sister publication 

ours), 59% 1,000 
chief security officers 
said electronic attacks 
pose much bigger con- 
cern their companies 
than physical ones. 

“Everyone agrees [security is] 
big issue, but there’s budget for 
and you still have deal with it,” 
said one our survey respondents. 
That observation neatly summarizes 
the situation for fiscal 2003 
looms: mounting threats and mini- 
mal resources. 

fact, our survey showed that 
those who have been spending more 
money security are mostly drain- 
ing the cash from existing bud- 
gets (28%) rather than funding 


with additional monies (16%) 
turning sources outside 
(8%). Jazzier technologies such 
biometrics and authentication get 
short shrift the shopping list, 
security spending concentrates 
practicalities such additional data 
security and backup. 

Indeed, the practical, prob- 
lem-solving nature pros that 
continues impress us. the after- 
math the attacks last year, our of- 
fice was flooded with calls from 
people volunteering their technical 
expertise and assistance. During the 
year that followed, written 
hundreds stories about how you 
have all continued cope with new 
security demands and old budget 
problems. 

Throughout this issue, this 
mournful memorial week, find 
another dozen stories labeled 
“September Responds.” Some 
those articles, hope, will give 
you fresh ideas consider areas 
such vulnerability testing, busi- 
ness continuity, disaster prepared- 
ness and even contract negotia- 
tion. Others provide the latest news 
how your colleagues contin- 
ue, always, respond. 

And case one’s said this 
you lately: Thank you for being 
there, and for getting the job done. 


Spee www. jk Lossner.com 
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PIMM FOX 


Prompts 
Paper Chase 
Out the Door 


THOUGHTS TURN 

the tragic events 

last September, there 
are lessons cull from the 
wreckage the 35th and 36th 


floors the north tower the World 
Trade Center. 

This was the site Kemper Casual- 
ty, division Kemper Insurance. 
The attack cost the company office 
space for 225 employees (all whom 
were safely evacuated) and servers. 
The employees were relocated New 
Jersey and Long Island, while 
trucks loaded 
with monitors, 
laptops, servers 
and phone 
switches rum- 
bled from Kem- 
per’s Chicago- 
area facilities 
the East Coast 
augment the 
firm’s disaster 
recovery efforts. 

The emer- 
gency plan proved workable, with 
e-mail restored before midnight 9/11 
and all data from applications available 
within hours. 

A clear success, but Kemper was 
hardly complacent afterward. 

“Paper difficult replace,” says 
Ron Roecker, CIO Kemper Casualty, 
“and lost lot paper that day, 
and that had big effect our agents, 
brokers and customers.” 

That’s why Roecker made commit- 
ment move many the compa- 
ny’s paper files digital format 
within content management system 
possible. 

“Everything being Web-based,” 
says Roecker, “including our internal 
applications; makes deployments 
dispersed locations easier.” 

reach his goal removing 
much paper from the business 
can, Roecker has moved central- 
ized organization because it’s easier 
manage the deployment Web- 
based applications. also use this 
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centralized approach control what’s 


desktops. 

The process began documents 
were transferred into electronic for- 
mat. Then Roecker took advantage 
content collaborative 
possibilities. 

“When did the analysis, saw 
the functionality going with content 
management way build collab- 
orative environment,” says. cites 
the scenario underwriter Chi- 
cago working with underwriter 
New York phone and e-mail rather 
than faxing documents back and forth. 

“We don’t have have the person 
Chicago fax thousand pages poli- 
someone New York,” Roecker 
says, adding, “There’s workflow 
piece that comes with content manag- 
er,” referring IBM’s Content Manag- 
technology. 

The content management system 
also produces to-do lists that are sent 
users’ e-mail boxes with specific no- 
tations agents and brokers working 
common files can follow the flow 
notes and comments. And unlike sticky 
notes, those comments can’t get lost. 

“Decision-making times are squeezed 
down from weeks hours,” says 
Roecker. “That’s how content manage- 
ment changing things the insur- 
ance business.” 


THORNTON MAY 
Critical 
Thinking 
Fails Dell 


OMETIMES companies 

can things well for 

while that they believe 
that their future will rep- 


etition the past. History 
littered with the carcasses corpora- 
tions that believed this. 

What surprises these days that 
Dell Computer’s latest strategy dem- 
onstrates that kind very limited we- 
don’t-have-to-take-those-kinds-of- 
risks-anymore conservatism. sense 
lack critical thinking. 

This pity. Dell smart compa- 
ny. Along with the rest the industry, 
have come expect truly differenti- 
ated and innovative strategic thinking 
from the folks Round Rock, Texas. 
However, the strategy-makers Dell 
appear have started believe their 
own press clippings. 


This failure critical 
thinking about Dell’s future 
isn’t limited the people in- 
side the company. per- 
vades the entire industry, the 
press and academia. late, 
Dell suffering from the 
same they-can-do-no-wrong- 
the-world-belongs-to-them 
media sycophancy that pre- 
cipitated Enron’s fall from 
grace. Meanwhile, B-school 
professors trot out lame and 
oh-so-historical supply chain 
cases showing how Dell’s di- 
rect model eating everyone’s lunch. 

course, Dell has great track 
record. was prescient designing its 
direct-to-consumer model. was cour- 
ageous avoiding the siren song 
allegedly integrated software. 
And was absolutely spot-on creat- 
ing second-to-none customer assis- 
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tance/support competency. 
However, that was yester- 
day. futurist ask, 
What about tomorrow? 

Dell has stated its inten- 
tion enter three markets 
the end the year: 
printers, handhelds and un- 
branded PCs. But it’s enter- 
ing existing markets, not 
creating them. This trag- 
ic. Dell bypassing op- 
portunity reignite the en- 
tire technology sector. 
Stealing some printer sales 
from Hewlett-Packard and pumping out 
couple more Palms isn’t the answer. 

see three monster game-changing 
opportunities looking Dell right the 
face. the future, the big money for 
Dell lies not selling more boxes but 
selling its expertise supply chain 
efficiencies and direct-to-consumer 


competence. were Michael Dell, 
would the industry leader each 
vertical market and offer streamline 
its supply chain exchange for all the 
gear the company buys and piece 
the equity upside. 

Next, would have some sassy infor- 
mation architects repackage all that 
“what being bought” information 
that aggregates easily from the 
proper operation the Dell direct 
model into meaningful top-of-the- 
house briefing nuggets. 

Finally, would take the Dell direct 
model, which redefined point-of-sale 
technology, and create point-of-design 
systems. Have CTOs log and create 
their “fantasy product sets,” then link 
with venture capitalists fund and 
build prototypes. 

The question not whether Dell has 
future; it’s whether that future 


Than Plain English 


AGREE WITH Kathleen 
points her 

article “Failure Com- 
municate” [QuickLink 
31976], however her “plain 
English” translations still 
contain geekspeak. Most 
business people will not un- 
derstand terms like plug and 
play core. Also, the expla- 
nation VPN isn’t really 
understandable unless you 
understand the underlying 
principles, which business 
people have to. 
Most the items the list 
are too detailed level, 
discuss these kinds things 
with business person, 
whether he’s using jargon 
plain English. Instead us- 
ing plain English describe 
what proxy server is, you 
should just say need 
buy some additional com- 
puters can get faster 
access the Internet, and 
leave that. 
George Alland 
Woodbury, Minn. 


Easing Software Liability 


FTER MANY YEARS in 
the software field, 
don’t believe that the 


suggestions offered Patri- 


cia Keefe her editorial 
“Software Insecurity” would 
really help [QuickLink 
31815]. True, there’s lot 
buggy software, but many 
software companies have 
worked with try hard re- 
duce bugs much possi- 
ble. Software much more 
complex than many other 
products. takes too much 
effort, money and time try 
all the millions combina- 
tions possible. The only 
folks who were successful 
doing some extent 
were proprietary manufac- 
turers the and 
that controlled both hard- 
ware and software. 

Trying increase soft- 
ware product liability will 
end costing all much 
more than the bugs have 
now. Big liability require- 
ments are excellent for big 
vendors. Their smaller com- 
petitors can then easily 
crushed financially. Instead 
thousands software 
vendors, will have 
handful. Your software may 
work better, but will cost 
you lot, and you will have 
wait long time for new 
features, since everything 
has extensively tested. 
Sanjay Murthi 
SMGlobal Inc. 

Cary, N.C. 


Sold Convergence 


HIS ARTICLE “Conver- 
Trumps Conver- 
gence” 
32209], Michael Gartenberg 
makes the same mistake 
with PDAs and phones that 
Bill Gates did with the 640K 
memory limit and that early 
purchasing managers did 
deciding color screens 
served business purpose: 
focuses only current 
uses and not the potential 
the future. Having used 
combined PDA/phone 
heavily for several years (the 
Nokia 9110, not sold the 
serious PDA use involves 
the cellular connectedness 
and telephone integration 
the device. The 3,000-plus 
phone numbers ad- 
dress book are instantly 
available the phone, 
rarely have dial numbers 
receive call that isn’t 
identified name. E-mail 
messages and attached doc- 
uments are available the 
PDA for reading forward- 
ing. Faxes can received 
and stored for paperless use 
anywhere. Information 
e-mail doesn’t have 
copied PDA calendar 
address book it’s al- 
ready there. Notes taken 


the PDA, news articles and 
other information can 
e-mailed faxed one 
click. Gartenberg is, 
course, correct that all this 
functionality could 
achieved set devices 
communicating through 
Bluetooth similar proto- 
col. But that raises even 
more complex issues in- 
terface design, protocol de- 
sign and wireless communi- 
cation speed. suspect that 
had Gartenberg’s research 
included people who are al- 
ready using convergence de- 
vices, would find that 
none would give them 
return primitive, uncon- 
nected PDAs. 

Bruce Krulwich 

Chief technology officer 

Linguistic Agents 

Jerusalem 


COMPUTERWORLD welcomes 
comments from its readers. Letters 
will edited for brevity and clarity. 
They should addressed Jamie 
Eckle, letters editor, Computerworld, 


Box 9171, 500 Old Connecticut 


Path, Framingham, Mass. 01701. 
Fax: (508) 879-4843. 

E-mail: letters@computerworld.com. 
Include an address and phone num- 
ber for immediate verification. 


For more current letters on these and 
other topics, go online to 
@ computerworld.com/letters 


RELIABLE* 
ALTERNATIVE 
HIGH-COST 


For your next generation applications, 
move the next generation database 
technology. Caché the post-relational 
database that combines high-performance 
SQL for faster queries and advanced 
object database for rapidly storing and 
accessing objects. 

With multidimensional engine, 
your future applications will massively 
scalable and lightning fast and they 
require frequent database administration 
hardware and middleware upgrades. get 
higher performance, lower cost. 

Plus, Caché comes with powerful Web 
application development environment that will 


With its minimal requirements for database 
administration and hardware, 


dramatically cut the time required build Oracle users will happier with Caché. 
and modify your applications. 
The reliability Caché has been proven are InterSystems specialist data 
“life-or-death” applications the world’s management for years, providing 24x7 
largest hospitals. With high reliability, high support million users countries. 
performance and low cost-of-ownership, available for Windows, OpenVMS, 
happier with Caché. Linux and major Unix systems. 
InterSystems 


CACHE 


Make Applications Faster 


2002 tnterSystems Corporation, All nghts reserved. InterSystems Cache 1s a registered trademark. of InterSystems Corporation. Other product names are trademarks of respectve vendors. 
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FIGHTS TERROR 


The Los Alamos National Labora- 
tory focusing its considerable 
scientific expertise homeland 
defense and the war terrorism. 
PAGE 


ASSESSING 
VULNERABILITY 


Since Sept. ll, managers have 
been taking steps inventory 
their applications and patch vul- 
nerabilities. While software tools 
can automate those processes, 
they can also add complexity. And 
most don’t help with the patching 
and repair process. Some compa- 
nies are turning assessment 
application service providers 

for help. PAGE 


DRIVING STORAGE 
CONVERGENCE 


The limitations storage network- 
ing will overcome only fully 
converged SAN/NAS network stor- 
age, says Network Appliance CTO 
Steven Kleiman. PAGE 


SECURITY JOURNAL 


Eliminating rogue wireless LAN 
access points turns out 

much easier task for security 
manager Mathias Thurman than 
creating policies and standards 
for WLAN infrastructure. 
PAGE 


QUICKSTUDY 


Universal Description, Discovery 
and Integration XML-based, 
platform-independent, Internet- 
accessible registry which busi- 
nesses, software vendors and pro- 
grammers can describe the Web 
services they offer and provide 
links how use them. PAGE 


ECHNOLOGY 


GARY ANTHES 


Metaphorically Speakin 


ECHNO-ENTREPRENEUR RAY KURZWEIL recently bet Lotus 
founder Mitch Kapor $10,000 that computer will pass the 
Turing test before 2029. British computer science pioneer 
Alan Turing 1950 said that human interrogator, com- 
municating blindly via text messages, couldn’t distinguish 


responses from human from those computer, 
then the computer could deemed have human 
intelligence. 

Kurzweil maintains that 2029, will use nano- 
scale brain-scanning technology completely map 
and understand how the brain works and then reverse- 

But Kapor says Kurzweil making dubious as- 
sumption that the brain fact works like com- 
puter, albeit very complex one. Kapor argues that 
shouldn’t engage “distant extrapolation” the 
brain-as-computer metaphor. overreliance bio- 
logical metaphors has been the undoing much 
artificial intelligence, says. 

Indeed, have used concepts from biology 
computational metaphors ever since Aetna Insurance 
installed its first “electronic brain” (an IBM 650) 
1954. Such metaphors can give the layman shallow 
inkling what’s going on. But computer scientists 
and application developers would never rely them 
guide their work, would they? 

turns out researchers are increasingly doing just 
that. Stephanie Forrest, computer scientist the 
University New Mexico, building systems that 
can detect hacker intrusions imitating the human 
immune system. key challenge computer secu- 
rity determining what normal behavior and what 
potentially harmful behavior computer net- 
work, especially when threats are changing regularly. 

Forrest’s systems automatically “dis- 
cover” what normal and what not, just 
our immune systems have learned do. 
Her software largely self-maintaining 
and doesn’t require updating experts. 
computer scientist Los Alamos National 
Laboratory, appointed antiterrorism 
research task force after Sept. ll, told 
the technique holds great promise for 
homeland security. 

Now consider the ant. Rather than rely- 
ing complex, centralized logic, systems 
that mimic ant behavior use many small, 
autonomous software agents. With each 
acting the simplest rules, just ants 


GARY ANTHES 
Computerworld's editor 
at large. Contact him 
at gary_anthes@® 
computerworld.com. 


do, these agents together can solve problems that, 
viewed whole, are enormously complex. Today, 
software based ant behavior used for optimiza- 
tion applications such factory scheduling, vehicle 
routing and telecommunications switching. 

Meanwhile, other researchers are developing 
systems based “evolutionary computing” solve 
factory scheduling and optimization problems. The 
systems iterate through many trial solutions, breed- 
ing better and better ones from the most promising 
parents each generation trials. Solutions liter- 
ally evolve process that selects the “fittest” 
every generation. 

These biology-inspired algorithms aren’t just the 
stuff Ph.D. dissertations. Researchers have really 
studied the immune system, ants, evolution and other 
biological phenomena and have invented useful new 
computational techniques based them. 

you are creator software, even user it, 
you might well look nontraditional sources, 
biological and otherwise, for inspiration. And you 
might consider that the falling cost computer cycles 
makes problem-solving approaches that were only 
theoretically possible few years ago practical today. 

Richard Gabriel, computer scientist Sun Micro- 
systems, says does 90% his research the In- 
ternet and that can already pass the Turing test. 
“That’s heck smart thing out there,” says. 
just typed into Google, ‘How change tire?’ and 
got the answer the first page.” 

Even Kapor would have admit that the 
Internet works lot like the brain. con- 
sists millions loosely connected nodes 
(neurons) whose relationships (synapses) 
change constantly. Nobody has trained the 
Internet answer questions like how 
change tire, and nobody maintains huge 
database rules. Like the brain, the Inter- 
net continues work even when large 
number nodes links are broken. 

I’m guessing Kurzweil will win the bet. 
look biology for ideas not for superfi- 
cial analogies, but for real guidance. 
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Los Alamos National Laboratory 
science homeland defense. Bob Brewin 


ALAMOS NATIONAL Labora- 
tory, which developed the 
atomic bomb that helped end 
World War II, has since Sept. 
focused the scientific expertise 
its 7,500 employees home- 
defense and 

the war terrorism while 

continuing its mission 

nuclear weapons research. 

The Los Alamos, 
based laboratory, which 
owned the Department Energy 
and operated the University Cali- 
fornia, tapping into its expertise 
everything from quantum physics 
computer science. Research backed 
massive supercomputers, including 
30-trillion-operations-per-second 
cluster due online year’s end. 

Los Alamos isn’t looking for imme- 
diate results. Rather, it’s applying its 
resources arcane sciences devel- 
tools and even products that can 
applied years down the road, though 
will also commercially spin off promis- 
ing systems quicker. 

For example, according Terry 
Hawkins, leader the laboratory’s 
nonproliferation and internal security 
division, Los Alamos developing 


method detect biological agents 
such anthrax combining biolog- 
ical antigen with computer chip. The 
antigen, Hawkins says, “acts the same 
human cell” detecting the pres- 
ence agent. The antigen 
housed double-layer 
membrane formed from 
lipids, class insoluble 
organic compounds that are 
constituents living cells. 
Electrical current the 
membrane passed the chip could 
give user instant readout the 
type biological agent has detected. 
Hawkins says Los Alamos has already 
developed system that can detect the 
potentially deadly Hanta virus, which 
prevalent mice the Southwest, 
and believes that time may 
possible develop portable, pro- 
grammable device that can detect 
number viruses. Such tool could 
also play significant role helping 
public health agencies battle diseases 
such the common flu, adds. 
Deborah Leishman heads 
edge modeling team Los Alamos that 
helped develop tool called EpiSims 
for simulating the spread epidemics 


vel hicles 


the movements 


large urban area. She says the tool will 
help public health agencies integrate 
data from various sources, such 
emergency rooms around metropoli- 
tan area, into database that will pro- 
vide insights that can’t gleaned 
from single data points. 

Los Alamos developed EpiSims 
spin-off from even larger program 
called Transportation Analysis Simula- 
tion System (TranSims) designed 
model the ebb, flow and social interac- 
tions people large city. Leish- 
man says TranSims can help emer- 
gency management agencies devise 
evacuation plans for cities that don’t 
have them, such Washington. 

Los Alamos has already modeled 
Portland, Ore., which has population 
1.6 million. Leishman says she could 


EPISIMS SIMULATION that shows 
the progress contaminant plume 
across the city Portland, Ore. 
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use TranSims and the laboratory’s su- 
percomputers model New York, 
which has population million. 

Los Alamos has returned its 
physics roots find new technologies 
for cyberwarfare. Scientists have fig- 
ured out how use quantum mechan- 
ics encrypt data inside photon. 
The process, called quantum encryp- 
tion, ensures that users can detect 
whether photon has been intercept- 
ed, Hawkins said. 

Though the laboratory has transmit- 
ted such cryptophotons distance 
six miles free space, Hawkins says 
Los Alamos has more work be- 
fore such method becomes routine. 

The Los Alamos computer and com- 
putational sciences division supports 
these and other homeland defense 
projects the most fundamental lev- 
els, according Stephen Lee, deputy 
leader the division. 

His division engaged multiyear 
projects focused on, for example, bet- 
ter ways extract and model data for 
simulating nuclear explosions ter- 
rorists’ threats. The trouble with data 
measured terabytes that compre- 
hending taxes the mind. Los 
Alamos working tools extract 
meaningful information from data and 
present usable form. 

Los Alamos Director John Browne 
sums the laboratory’s long-term 
mission message employees that 
puts the emphasis being able “an- 
ticipate scientific and technological 
needs five, even years.” But, 
he adds, Los Alamos must also be 
ready refocus its efforts quickly 
order “to accommodate sudden and 
unanticipated changes meet new na- 
tional security requirements.” 
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Winning with e-commerce: something new antiquarian book dealer Peter 
Harrington. selling 25% their volume the Web. Their platform? The easy-to-manage 
IBM @server Select xSeries models feature the Xeon™ processor give you superior 
performance and cost-effectiveness. For complimentary IDG report how growing companies are using 


All numbers and results reported are from customer sources. This customer example is intended as an illustration only. Costs and results obtained in other customer environments will vary depending, among other things Bie 
ace. on individual customer configurations and conditions. IBM, the e-business logo, e-business is the game. Play to win and xSeries are trademarks or registered trademarks of International Business Machines Corporation See 
ay intel, the intel Inside logo and Xeon are trademarks or registered trademarks of Intel Corporation or its subsidiaries in the United States and other countries. Other company, product and service names may be trademarks 
Bi or service marks of others. © 2002 1BM Corporation. All rights reserved 
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HEN NEW, high-risk 
Apache worm was an- 
nounced in June, Motoro- 
Inc.’s security team 
was able find and plug 
its vulnerabilities before 
the worm hit, thanks 
Foundstone Inc., the company’s vul- 
nerability assessment partner, says 
Bill Boni, chief information security 
officer for Motorola’s information 
protection services. 

Since Sept. ll, managers have 
been taking steps get their arms 
around the difficult job inventorying 
their corporatewide applications and 
patching systems before 
attack vulnerabilities 
can take out vital services. 
But those tasks are expen- 
sive, time-consuming and 
ultimately impossible to 
achieve done manually scanning 
systems, say analysts. 

Thanks number commercial 
and freeware tools the market to- 
day, managers can automate those 
processes. But users say some these 
tools can add even more complexity 
scanning for too many vulnerabilities, 
leaving lists things repair that 
may not align with corporate security 
requirements, for example. Other tools 
spit out vulnerabilities and services 
that don’t even exist. And most the 
tools help with the patching and 
repair process, which many users say 


TECHNOLOGY 


they want. Some companies, such 
Tower Records, West Sacramento, 
Calif.-based music and video retailer, 
are giving installing and manag- 
ing their own tools and turning as- 
sessment application service providers 
simplify this vital function for them. 

Vulnerability assessment tools, 
which cost $50,000 $100,000 per 
year for Class network, use vari- 
ety technologies. Some scan hosts 
for insecure services and ports, patch 
levels and other configuration prob- 
lems. Network-based assessment tools 
examine traffic patterns for indicators 
Simple Network Management Pro- 
tocol, User Datagram Pro- 
tocols and other traffic- 
related vulnerabilities. 
Some tools provide auto- 
mated services over the 
Web. Some focus on appli- 
cation assessment. And some all 
those things. 


Too Much Information 

But without way manage and 
prioritize vulnerability reports, users 
are faced with the same problem they 
have with their closely linked intrusion- 
detection counterparts: too much in- 
formation to sift through and act on. 
response, some vendors are at- 
tempting match their assessment 
information against information de- 
rived from intrusion-detection agents 
weed out false positives and pinpoint 


Answer: Managed Vulnerability As: 
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Some companies including Tower Records and Motorola are 


turning managed services handle vulnerability assessment 
for them. This diagram depicts Qualys’ QualysGuard service, 
used Tower Records. QualysGuard automated Web- 
based service with distributed, scalable and secure infra- 
structure. Load-balanced, dual-homed, inference-based scan- 
ning servers and Web application servers communicate with 


the QualysGuard KnowledgeBase to detect and report vulnera- 


bilities on customers’ networks. All customer data is encrypted, 
and the keys are accessible only to customers. 


Secured connection 


QualysGuard 
Knowledge Base 


Application servers 


Security report 


true vulnerabilities. But they 
been very successful, say analysts. 
“Some scanners are really dumb. All 
they emulate hacker operating 
with minimal knowledge about 
remote system and make assumptions 
about what’s on the network, which 
creates lot false positives,” says 
Patrick Heim, vice president enter- 
prise security McKesson Corp., 
$50 billion medical services and sup- 


False positives and overwhelming flood information 


leave companies yearning for less confusing ways assess 


their vulnerabilities. Deborah Radcliff 


Wanted: Clear 


nerabilt 


plies vendor San Francisco. 

Internet Security Systems Inc., the 
maker one product that has been 
criticized number users and 
analysts for false positives, taking 
steps to remedy the situation. 

“ISS’s scanner does have reputa- 
tion for having very high false posi- 
tive rate, not just the operating sys- 
tem mismatches, but often reporting 
phantom services being running 
even when they says John 
Pescatore, an analyst at Gartner Inc. 
Stamford, Conn. 

Atlanta-based ISS trying ad- 
dress the false positives with its Inter- 
net Scanner 7.0, which scheduled 
ship the end the year. Version 7.0 
will include dynamic check assign- 
ment determine what operating sys- 
tems are running host, including 
routers, higher degree accuracy, 
says Patrick Wheeler, Internet Scanner 
product manager. And current 
Version 1.2 RealSecure SiteProtector 
security management console incorpo- 
rates security fusion module that 
correlates vulnerability data and ISS’s 
degree, users can target priority 
repair areas, adds. 
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Qualys remote scanners 


Qualys remote scanners 


Qualys remote scanners 


Fusing intrusion-detection and 
assessment data would not only help 
prioritize repairs, but also reduce the 
number reports coming from the 
intrusion-detection system sensors 
themselves, according to Pescatore. 
However, most vendors haven’t inte- 
grated those two very well, says. 


Integrated Approach 

couple exceptions might 
nCircle Network Security Inc., San 
Francisco-based risk-assessment ven- 
dor, and PentaSafe Security Technol- 
ogies Inc. Houston. Both companies 
use multipurpose agents for intrusion 
detection and assessment. They also 
approach vulnerability management 
from policy standpoint, which fur- 
ther narrows vulnerability reports 
only those issues that violate policy. 

Thomas Murray, analyst 
consulting firm Headlab Inc. Tulsa, 
Okla., has tested PentaSafe’s products 
against other assessment tools from 
large network management and secu- 
rity vendors and small niche vendors. 
says none offers the combination 
assessment, intrusion detection and 
policy management that PentaSafe’s 
VigilEnt security manager assessment 
tool and its policy manager do. 

still little buried under data, 
but it’s better than ratio 
what our report volume was without 
these tools,” says Murray. “The Penta- 
Safe agents are fast. And you can con- 
figure them very tightly reduce 
report logs even more. But that also 
takes time.” 

John Shields, user nCircle’s 


User’s network 


SOURCE: QUALYS INC., REDWOOD SHORES, CALIF 


says the network risk assessment 
package particularly its ability 
show exceptions corporate policy 
reduces administrative overhead and 
false positives manageable limits. 
“We don’t run Linux. someone 
Linux system, IP360 will pick that up,” 
says Shields, senior vice president 
e-business Patelco Credit Union 
San Francisco. “We have fewer false 


positives, and now need only one 
person manage and respond vul- 
nerabilities.” 

Users also advise not getting caught 
the number vulnerabilities 
that these tools scan for, because the 
more vulnerabilities they look for, the 
more report logs they produce. And 
users say they can’t support too many 
logs. Instead, they want find the 
most critical vulnerabilities that ac- 
count for the most commonly success- 
ful types attacks their networks 
and security policies. Then they want 
way ensure that those repairs are 
carried out. 

“If you look most scanner outputs, 
you have hundreds vulnerabilities 
that can addressed. The time 
takes manually make sure the patch- 
es are made is ridiculous,” Heim ex- 
plains. “With system adminis- 
trators responsible for different areas 
single box, want put some- 
thing place that can hold people 
accountable for repairs being made. 

For this reason, Heim leaning 
toward FoundScan from Mission Viejo, 
Calif.-based Foundstone evalu- 
ates assessment tools for his network. 
FoundScan assesses alerts as either 
high, medium or low priority, and it 
can customize alert levels. The soft- 
ware issues trouble tickets for high- 
priority repairs and reminds pre- 
designated responsible party when 
particular repair hasn’t been made 
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The Annual Checkup 


WHILE AUTOMATED ASSESSMENT TOOLS and application services can help keep net- 
works running with minimal exposure, substitute for annual security audit 
trained security staff, says Allen Carey, information security analyst IDC, Framingham, 


Mass.-based research firm. 


Automated fail take into account people, processes, best practices, physical 
security and other components comprehensive risk assessment sweep across large 
organization, says Bill Ferguson, partner Tatum Partners LLP, Pittsburgh-based 
outsourcer consulting services. “When audit, look factors,” says 
Ferguson. help companies conduct more comprehensive audits their own, sug- 
gests that the following points audited companywide assessment: 


Security policy and accountability 
for its enforcement 

Risk assessment against critical 
information assets 

= Account management and access 
controls 

Authentication 

Configuration and change 
management 

Session controls 

Network security, Internet access 
policies and network services 

Cryptographic technologies for 
transmission and storage 


Modems 

System administration 
Incident response 

Auditing 

Viruses 


Contingency planning 


Backups 

Maintenance 

Labeling (is sensitive information 
Clearly defined and labeled?) 

Media sanitizing and disposal 

Physical security 

Personnel security 

Training and awareness 


within the specified deadline. 

course, would nice such 
products also automated the remedia- 
tion process. Of the major assessment 
players, only Houston-based BindView 
correction engine 
does any automated patching, says 
Gartner analyst Charles Kolodgy. The 
next best step taking action re- 
duce the exposure while the repair 
being made. July, nCircle announced 
IP360’s first automated response capa- 
bility automated blocking Fire- 
from Redwood City, Calif.-based 
Check Point Software Technologies 
Ltd., with other firewalls follow. 


Ina Hurry? 

Most these products require in- 
stallation servers agents both, 
which most users say two- 
three-day process for a Class C net- 
work, provided the vendor has 
knowledgeable services team and few 
obstacles. But some managers say 
they don’t want deal with the up- 
front time installation, nor they 
want own and manage the assess- 
ment technology. they’re turning 
assessment application service pro- 
viders such Qualys Inc. Redwood 
Shores, Calif., which charges $60,000 
for unlimited use subscription 
scan Class network. 

“There was installation and 
setup. All had was give 
Qualys list the addresses 
wanted them check, and the next 
day were ready go,” says Kevin 
Ertell, vice president online opera- 
tions Tower Records, which signed 
for QualysGuard late last year. 

There’s faster way start vulner- 
ability assessments, adds Boni, who 
jump-started Schaumburg, 
Motorola assessment starting 
with Foundstone’s Web-based assess- 
ment service the day after the Sept. 
terrorist attacks. later transitioned 
Foundstone’s assessment product. 

“The reason were able get into 
business quickly Sept. that 
used Foundstone’s Web services,” 
Boni says. “There’s capital acquisi- 
tion hardware. You just plug the 
addresses you want scanned and 


California. You can contact her 
derad@aol.com. 


ASSESSMENT CONNECTIONS 


For links to assessment tool vendors and assessment 
service providers, see our Web site 
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www.computerworld.com 
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Storage 


onvergence 


senior vice president engineering 
and chief technology officer Network 
Appliance Inc. Sunnyvale, Calif., 
Steven Kleiman the visionary behind 
the vendor’s storage technology agenda. 
Robert Mitchell 
talked with him about merging the worlds 
storage-area networks (SAN) and net- 
work-attached storage (NAS). 


What will the most important storage 
technology trend the next months? 
SAN/NAS convergence clearly 
happening. have two prod- 
ucts that essentially export 
block-level interfaces. One 
SnapDrive, and the other our 
DAFS [Direct Access File Sys- 
tem] Database Accelerator. 
continue our architecture with 
filer head with Fibre Channel-based 
interconnections. 

Our system has underlying block 
management layer that does the RAID 
layout optimization, and file 
semantic layer top that that does 
things like create directory and what- 
not. And top that are the file pro- 
tocols. added LUN [logical unit 
number] semantic layer, and that cre- 
ates LUNs various sizes and goes 
right top the underlying block 
management layer. uses the same 
storage and storage pool. Our intent 
try the SAN stuff share 
space with the NAS stuff and take ad- 
vantage the array bandwidth that’s 
available. 


What about dynamically scalable vol- 
umes? That’s not easy with SANs 
and Fibre Channel arrays. Will that 
change converged world? There are 
whole steps that you don’t with our 
stuff that you have with the tradi- 
tional large-block server approach. 
The remaining SAN management stor- 
age management issues that SAN has 
are inherent SANs. 

This one the reasons why peo- 
ple like NAS. Some applications like 
the SAN protocols better, and can 
deal with that. Personally, think the 


NAS protocols, when used, lead 
more efficient use storage. 


Are you saying that host servers should 
read and write files instead doing 
SCSI block transfers? They already do. 
The question how this shakes out 
over time people get higher- and 
higher-speed networks with low over- 
head file access protocols like NAS. 
shall see. 


Management NAS boxes has tradi- 
tionally been complicated the fact 
that every NAS appliance must 
have its own filer head and 
management interface. How 
will this change the future? 
can bring down the over- 
head managing multiple filers 
fairly small degree but the manage- 
ment the storage [devices] them- 
selves does not away matter 
what you do. 

Today you actually have 
some management, you ona 
head-by-head basis. Going forward, 
that will blend. You will see less 
head. Today that’s not the case. 


How exactly will that blend? the data 
center you can solve some the mul- 
tiple filer problems with high-speed 
interconnect technology and try 
bring more scalable filer, you will. 


The interconnect for our cluster our 
new model InfiniBand, and that’s 
clear direction terms using these 
new, high-speed commodity fabrics 
build more scalable systems. 


Fibre Channel can transport data but 
control and management information 
must routed over LAN, essen- 
tially requiring parallel networks ex- 
ist. When will this change? been 
pushing toward in-band management 
much can, and the Fibre 
Channel community doesn’t appear 
going there. prediction that 
will stay separate for now. 


With iSCSI you can route storage blocks 
over instead Fibre Channel. But 
the technology ready? you look our 
product, it’s based the [Emu- 
lex Corp. GN/9000SI] RDMA [Remote 
Direct Memory Access] over TCP/IP 
card that uses Gigabit Ethernet. 
can get reasonably good performance 
with [it]. think seeing some 
reasonable TCP/IP off-load cards that 
are quite competitive with [Fibre 
Channel host bus adapter] technology. 

We're members the RDMA Con- 
sortium, and the goal come 
with standard RDMA over TCP pro- 
tocol time make the first genera- 
tion gigabit TCP off-load engines. 
this all comes fruition, you will 


0 


pany: 
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have one high-speed network that does 
traditional NAS and other communica- 
tion protocols off-loaded way 
with iSCSI and DAFS all one card. 


Filers are expanding tens tera- 
bytes, but how you back them up? 
NetApp filer can support eight backup 
streams tape. Even with the best tape 
technology, 20TB filer would take 
hours complete full backup. How 
you get around that? You’ve come 
the same conclusion came several 
years ago, that this just hosed. The 
data exploding way faster than tape 
getting faster bigger. ad- 
dressing that putting another level 
the storage hierarchy with NearStor 
backup]. You should 
looking over the next few months and 
further for convergence our filer 
technology and caching technology. 
The goal get out the backup 
business daily basis and make re- 
store transparent, meaning there isn’t 
long downtime while you ahead 
and restore something. think tape be- 
comes more archival mechanism 
where you full backup once 
month, for legal purposes perhaps. 


Reference data servers like EMC Corp.’s 
Centera create unique for unchang- 
ing files, creating abstraction layer 
between stored objects and the applica- 
tions attempting access them. Using 
the Centera application programming in- 
terface, application can use this ob- 
ject name and longer must track the 
path the stored file. Will NetApp take 
similar approach? like think that 
already there. Part what 
about giving you low- 
cost ways storing archival data. 

Using name based the content 
pretty easy do, but don’t see 
need for it. Most the archiving 
mechanisms are done through applica- 
tions like Documentum and Filenet, 
and truthfully they’re the ones who 
should say what the underlying storage 
requirements should be. there are 
specific enhancements that are needed 
for data integrity, which don’t be- 
lieve right now, can add those pret- 
easily. But don’t see yet. 

object-based file system cer- 
tainly something Microsoft working 
Windows. The trouble until that file 
system interface standardized and 
agreed upon there’s point proto- 
colizing it. It’s not embedded every 
device like every host every applica- 
tion server the applications that 
this stuff today seem perfectly happy 
with the semantics that they’ve got. 
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tarting Over With 
NLAN 


Eliminating rogue access points easy 
compared with negotiating policy for 
secure wireless LAN infrastructure. 


Mathias Thurman 


URING the past few 

weeks, I’ve dedicated a 

significant amount 

time creating wire- 
less LAN (WLAN) policies 
and standards. WLAN site 
survey conducted few 
weeks ago convinced ac- 
celerate work this area. 
uncovered numerous miscon- 
figured WLAN hubs, access 
points (AP), that pro- 
vided access our 
network from the 
parking lot and 
some cases from the 
street. 

test for rogue 
hubs, parked car 
along the street incon- 
spicuous spot beside our cor- 
porate headquarters, booted 
laptop and inserted 
WLAN card. Within seconds, 
Yahoo Instant Messenger 
program woke sure 
sign that was the network. 
From there, was able exe- 
cute port scans, access our in- 
tranet and browse the employ- 
list. was also able query 
our internal Domain Name 
System and discover the 
addresses critical systems, 
such databases and payroll 
systems. 

Given some time, even 
moderately skilled hacker 
could have drilled deeper. 


Cutting the Signal 


response, immediately 
began writing wireless 
security policy get these 
unauthorized APs off the net- 
work. then started work 
developing wireless stan- 
dard address the technolo- 
aspects the policy. 

Our new policy will allow 
wireless access long the 


SECURITY 
JOURNAL 


employee’s manager autho- 
rizes and the user follows 
approved standards and pro- 
cedures. The policy will also 
determine acceptable use 
protect the company from any 
potential unauthorized activi- 
that might compromise our 
network. 

The CIO signed off 
the policy but did authorize 
mandating the im- 
mediate removal 
unauthorized APs. 
few days later, fired 
Mountain View, 
Calif.-based AirMag- 
net Inc.’s AirMagnet 
Handheld card and detec- 
tion software Pocket 
check for compliance. Sure 
enough, some APs were still 
online. Using the sig- 
nal strength meter, pinpoint- 
two them and got them 
pulled off the network, but I’m 
having hard time locating 
one last rogue AP. I’m trying 
get directional antenna 
assist with that task. That last 
rogue appears config- 
ured properly, with encryption 
enabled, but still needs 
removed from the network. 

The standards document 
the most time-consuming as- 
pect this project. We've al- 


was able 
execute port 
scans, access 
our intranet and 
browse the 
employee list. 


TECHNOLOGY 


ready decided use Aironet 
WLAN APs from Cisco Sys- 
tems Inc. We felt Cisco’s 
Lightweight Extensible Au- 
thentication Protocol (LEAP) 
was the most secure, you 
implement properly. When 
used with the Cisco Secure 
Access Control Server (ACS), 
LEAP also gives the ability 
use external authentica- 
tion and access control facility 
control access the wire- 
less network. 


Wireless Authentication 

The ACS can also communi- 
cate with external user data- 
bases and authentication ser- 
vices. This will let authenti- 
cate users against Windows 


Primary Domain Con- 
troller (PDC) that al- 
ready provisioned. This the 
same PDC use authenti- 
cate users the network for 
access to e-mail, drive shares, 
printers and our company in- 
tranet. Now will let users 
seamlessly access the network 
via the WLAN APs without 
requiring additional log-in. 

Next, need write stan- 
dards document that specifies 
the make, model and configu- 
ration for each WLAN compo- 
nent. Determining the proper 
configuration for secure 
WLAN the most time-con- 
suming, technical and critical 
aspect the project. ac- 
complish this, I consolidated 
configuration information 
from the results third- 
party audit, publicly accessi- 
ble documentation from the 
Internet and vendor documen- 
tation. Then scheduled 
meeting with representatives 
from the network group and 
the department discuss 
the available configuration 
settings for the APs, ACS and 
host software clients. 

configuration that will address 
features, usability and securi- 


ty. This required some com- 
promises. For example, the 
can support concurrent con- 
nections for single user. 
wanted limit users one 
session each; others argued 
that there might occasions 
when the user drops connec- 
tion but the still thinks the 
user connected. that case, 
the user could establish anoth- 
session without waiting for 
the AP to reset. In the end, we 
agreed keep the connection 
setting at one for now, but I 
will authorize increase 
this scenario becomes issue. 

Another setting relates 
the broadcast the Service 
Set Identifier (SSID), unique, 
configurable name that identi- 
fies the the network. 
APs come configured with 
SSID broadcast turned 
default. the doesn’t 
broadcast the SSID, then the 
user must know the num- 
ber before can connect 
the AP. plan disable 
SSID broadcast. 

also had decide 
whether needed third- 
party security enhancements 
such virtual private net- 
work two-factor authentica- 
tion secure the environ- 
ment. decided use Bed- 
ford, Mass.-based RSA Securi- 
Inc.’s SecurID tokenbased 
authentication, since al- 
ready have RSA ACE/Serv- 
place. But soon dis- 
covered that RSA’s SecurID 
doesn’t support LEAP the 
authorization protocol. RSA 
says plans support the 
new Protected Extensible Au- 
thentication Protocol (PEAP) 
standard, which will allow 
SecurID token-based authenti- 
cation way the Cisco APs. 

This new feature, which will 
require updates client soft- 
ware, should available 
sometime this month. Will 
work? Stay tuned. 


WHAT YOU THINK? 


This week's journal is written by a real 
security manager, “Mathias Thurman,” 
whose name and employer have been 
disguised for obvious reasons. Contact him 
at mathias_thurman@yahoo.com, or join the 
discussion in our forum. 


QuickLink 


To find a complete archive of our 
Security Manager's Journals, go online to 
© computerworld.com/secjournal 
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PEAP Show 


The 802.1x standard provides 
authentication framework 
for WLANs. PEAP, currently 
Internet Engineering Task 
Force draft standard, provides 
acommon authentication al- 
gorithm that should help elimi- 
nate some interoperability 
problems between WLAN 
clients, access points and au- 
thentication servers. Like its 
predecessor, the Extensible 
Authentication Protocol- 
Transport Layer Security 
(EAP-TLS), PEAP forces both 
client devices and APs au- 
thenticate. But while EAP-TLS 
requires digital certificates, 
PEAP uses easier-to-man- 
age username/password com- 
bination and encrypts the 
communication protect 
against brute-force dictionary 
attacks. Final approval ex- 
pected this fall. 


Authentication Architecture 

802.1x provides a standard way to put messages 
generated by different authentication algorithms 
into the standard frame format for 802.11 WLANs. 


SOURCE: CISCO SYSTEMS INC 


Jaguar 
Apple Computer Inc. has re- 
leased security update for its 
Mac 10.2 Jaguar operat- 
ing system software. The 
5.9MB update contains updat- 
Open Secure Sockets Lay- 
er, security and Sun Remote 
Procedure Call components. 


Cisco Adds 
Switch Security 


Companies can secure their 

network traffic higher per- 

formance levels and avoid the 

proliferation devices, using 

new security hardware mod- 

ules for Catalyst 6500 

Series switches. 
The VPN Services Module, 

NAM-2 Network Analysis 

Module, Firewall Services 

Module and SSL Services 

Module will ship this month. 
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your critical business data could end almost anywhere. 


The information accessed through your VPN considered banner news. But too 


often, is. Because the only thing keeping secure single password. That can have 
damaging effects you, your customers, your partners, even your bottom line. With 
the RSA solution, protect your critical business data with two-factor 
authentication, securing your VPN and making extremely difficult hack. And because 

major VPN providers like CheckPoint, Nortel, Lucent, Cisco and dozens others design their VPNs 
work with RSA Security, you can sure will operate simply and flawlessly almost any environment. 


That means lot less worrying about where your confidential information might show up. 


receive your VPN Security Info Kit and qualify for FREE 25-User Trial RSA 
two-factor authentication, www.rsasecurity.com/go/vpn-CW. call 1-800-495-1095. 


SECURITY 
The Most Trusted Name in e-Security” 


3 
Use password protect your VPN and 


q 


RSA Security, SecuriD and The Most Trusted Name in e-Security are registered trademarks or trademarks of RSA Security Inc., in the United States and/or other countries 
©2002 RSA Security Inc. All rights reserved 
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RUSSELL KAY 
RGANIZATIONS 
that attempt 
business on- 
line quickly 
learn that there 

are lots IT-related problems 

that others have already 
solved. Increasingly, those so- 
lutions are becoming readily 
available anyone, the 
form Web services. Web 
services are perhaps the latest, 
most powerful example 
reusable program compo- 
nents, the difference being 
that instead incorporating 
component code directly into 
your application, you simply 
access the service over the 

Web, pass your parameters 

along and let the remote 

service the work for you. 

It’s extraordinarily pow- 
erful model, but with one ma- 
jor hitch: How you find out 
what Web services are avail- 
able, where they are and how 
you use them? Businesses 
need to be easily able to dis- 
cover one another, make their 
needs and capabilities known 
and integrate services 
using each business’s 
preferred technology, 

Web services and 

commerce processes. 

Until recently, there 
was simple way 
get information about busi- 
nesses and what services they 
support and single point 
access obtain that informa- 
tion. Now there Universal 
Description, Discovery and 
Integration stan- 
dards-based system for regis- 
tering Web services. 

started mid-2000 Ariba 
Inc., IBM and Microsoft Corp., 
along with other compa- 
nies. Today, UDDI has more 
than 300 community mem- 
bers, including American Ex- 
press Co., SAP and Ford 
Motor Co. The UDDI group 
call itself standards 
body, even though offers 
framework for integrating 
Web services. The UDDI 
specification utilizes World 
Wide Web Consortium and 
Internet Engineering Task 
Force standards such XML, 
Simple Object Access Protocol 
(SOAP), HTTP and Domain 


oking 


DEFINITION 


Universal Description, Discovery and Integration (UDDI) 
akin Internet phone book that describes businesses 
and the Web services each supports. It’s XML-based, 
platform-independent, Internet-accessible registry 
which businesses, software vendors and programmers 
can describe the Web services they offer and provide 


links how 


Name System protocols. 

entered its public 
beta-testing phase Novem- 
ber 2000, when the three 
founding members each set 
a registry server compliant 
with Version 1.0 the spec 
that would interoper- 
ate with other mem- 
bers’ servers. 
mid-2002, all publicly 
available nodes the 
UDDI Business Reg- 
istry (UBR) have been 
upgraded Version 2.0. 

July 30, technical devel- 
opment and management 
the UDDI project was trans- 
ferred Santa Clara, Calif.- 


Action 


Company registers itself and 
any Web services supports. This 
registration information kept 
UBR, XML-based repository 
information about available ser- 
vices, registered companies and 
the services they support, and 
technical specifications on how to 
access the services. 


REGISTERED COMPANY 


use them. 


based Organization for the 
Advancement Structured 
Information Standards, glob- 
consortium developing and 
promoting e-business stan- 
dards. 


How UDDI Works 

its heart, UDDI data- 
base that’s searchable type 
business (typically identi- 
fied using the North American 
Industry Classification System 
NAICS the Standard 
Industrial Classification), 
business name geographi- 
cal location. 

Let’s say you have elec- 
tronic order-entry system that 


relies SOAP-based Web 
services and you want 
online business with comput- 
makers. You'll first need 
know which computer makers 
have compatible Web services. 
search UDDI would re- 
turn list those computer 
companies that have regis- 
tered with the 

UDDI registration open 
companies worldwide. 
When business registers 
with UDDI, provides the 
registry with “white pages” in- 
formation about itself (includ- 
ing items such name and 
contact info), “yellow pages” 
taxonomies (including NAICS 


INFORMATION UDDI BUSINESS REGISTRY 


Service type 


3. Company B contacts Company A to 
establish an e-business relationship. 


Basic 
(corporate and contacts) 
Service 
(specifications and related URL) 


specifications 


Company 
queries the UBR 
find out which 
businesses offer 
services that 
might fill its 
needs. 


USER 


SOURCE: NTT COMMUNICATIONS CORP. 


business identifiers, 
services and geographic loca- 
tion) and “green pages” infor- 
mation describing the compa- 
ny’s business processes and 
how business with it. 

Each service listed the 
UDDI registry identified 
being specific type ser- 
vice with unique identifier 
that comes from pool 
well-known service types al- 
ready registered with UDDI. 
Service types registration in- 
cludes pointer the name- 
space containing the service 
type description, who pub- 
lished the service, and ser- 
vice type registration identifi- 
er, called tModelKey. 

While the registering busi- 
ness provides most registry 
information, the service type 
normally entered soft- 
ware developers, standards 
bodies programmers. 

UDDI doesn’t dictate that 
organization must use 
specific technology 
methodology describe its 
Web service interface. com- 
pany free use simple 
prose, more formal descrip- 
tion languages, XML 
schema Web Services 
Description Language. 

More than 10,000 business- 
have registered with the 
three public UBR nodes, along 
with 4,000 individual pro- 
viders Web services. All 
registered data replicated 
among all the UBR nodes. 

Currently, there are three 
UBRs, with fourth from 
Tokyo-based NTT Communi- 
cations Corp. due come on- 
line this fall. Hewlett-Packard 
Co. was operating UDDI reg- 
istry but July announced 
that would discontinue host- 
ing the node. did say, how- 
ever, that intends contin- 


Kay freelance writer 
Worcester, Mass. You can reach 
him russkay@charter.net. 


For list online resources about UDDI, 
please visit our Web site: 


QuickLink 32573 
www.computerworld.com 


Are there technologies or issues you'd like 
to learn about in QuickStudy? Send your 
ideas to quickstudy@computerworld.com 
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Moore 


Chairman 
and Founder 
The Chasm 
Group 
Author of “Living on the Fault 
Line,” “Crossing the Chasm” 
and “Inside the Tornado” 


“How Creatively 
Apply Today’s 
Economy” 


Demo 


play the SANd 


sponsors as 0 


Storage Networking World 
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Industry Leaders... and network with press and analysts 
tutorials, general sessions, the Interoperabilit 


the 
torage Education! 


Register today attend the 
world’s premier event on: 


October 27-30, 200 Data Management and Security 


Renaissance Orlando Resort 
Orlando, Florida Emerging Technologies 


addresses all 
storage end-user 
needs...” 


John Spencer 
clo 
AMERICAN SOCIETY 
OF HEALTH-SYSTEM 
PHARMACISTS 


COMPUTERWORLD 
the ideal 
resource for data volume pushing your storage infrastructure SNW the only conference where you get: 
storage envelope? Are you getting increased pressure deal Storage Networking Industry Association 
education and with data management and business continuity? education 
training Attend Storage Networking World and get the world’s hands-on view the world’s only SNIA-sanctioned 


Interoperability and Solutions Demo 


© exposure to peers, experts, visionaries and 
technologies that other conference delivers 


See and Hear Geoffrey Moore See the World’s Best 


best answers your storage questions! Designed for 
both enterprise managers and storage professionals, 


PRESIDENT Opening Visionary Presentation Storage Interoperability 
Monday, October 28, 2002 and Solutions Demo 


THE WEATHER 


CHANNEL Geoffrey How Creatively Apply 


Moore Economy 


Chairman In the current economy, companies have two 
and Founder key priorities. The first is to attack costs, 
The Chasm The second is to extract resources from non- 
Group core processes in order to focus more atten- 
tion on core differentiation. For IT managers 
Author of —-————- |_ and professionals, all of this means applying 


IT creatively. In this special opening session, 


Geoffrey Moore will help IT managers and 


In our world-class, 
acclaimed Interoperability 
and Solutions Demo, 
you'll not only see real-life 
configurations, you'll tour 
the Demo area and discuss 
with experts the technical 
configurations and how 
they may apply to your 


ideal 
testing site for 
storage users 
evaluate new 


professionals understand where they should business. 
technology vee spend their time, what they should spend it 
* Livingon Crossing Inside on, and how they can prepare for the eventu- 
ine hasm ornado 


= 
James Riggs 


PROGRAM MANAGER 
ARMY PERMS 


Get the Point-of-View 


Opening Leadership Presentation 
Tuesday, October 29, 2002 


% Fran As CIO, Chief eCommerce and Security 


7 Officer for BettSouth, Fran has first-hand 
Dramis knowledge of the challenges that vast 
clo amounts of data can present to a company. 

What has BellSouth done in recent years to 

better deal with increasing amounts of data? 
Where does BellSouth see the future of data 
management? And how does it deal with the 
data given increasing concerns for security 
and business continuity? Find out in this 
special opening presentation. 


the number 
one storage 
conference 


Jon Labrie 
cTo 


WETA DIGITAL 


t 
qe 
wned and Produced by wned and End, d by 
more information and register, visit 


Storage Networking World, 
you see managers and 
professionals describe how 
they implemented key storage 
technologies today’s world. 
You'll learn from their valuable 
lessons and have opportunity network with them. 


e A Primer delivering 
basic storage concepts, 


applications. 
Delivered Tutorial Sessions, 
offering immediately implementable tips, tools and 
techniques that cover: 
Disaster Recovery, Backup/Restore and High 
Availability 
Securing and Managing Your Storage Networks 
Networking for Storage Managers, Virtualization, 
and Storage Technology 


terminology and business 


You ll participate in live 
demonstrations and meet 
exhibiting companies specializ- 
ing in the latest data manage- 
ment and storage networking 
products and services. 


Agenda Snapshot* 


For details, updates, and to register visit our Web site. 


Sunday, October 


9:30am-11:00am 
Noon-5:00pm 


1:00pm-5:30pm 


7:00pm-9:00pm 


Monday, Octo 
7:30am-8:15am 
8:30am-9:15am 
9:15am-12:15pm 
12:15pm-1:30pm 
1:30pm-4:00pm 
4:00pm-5:00pm 
5:00pm-8:00pm 


Industry Primer Tracks 

Golf Outing (complimentary for users) at Disney's 

Lake Buena Vista Golf Course 

SNIA-produced Technical and Business Tutorials 

* Voice of the User and Virtualization Track 

* Disa Recovery, Backup/Restore, and High 
Availability Solutions Track 

¢ Securing and Managing Your Storage Networks Track 

¢ Focus on Networking Your Storage Track 

¢ IP-based Storage Track 

Pre-conference Networking Reception 


ber 

Continental Breakfast 

Opening Visionary Presentation by Geoffrey Moore 
General Sessions 

Networking Luncheon 

General Sessions 

Technical, Technical/Business and Business Tracks 
Expo, Interoperability and Solutions Demo, 

and Buffet Dinner 


Tuesday, October 


7:30am-8:15am 
8:15am-8:55am 
8:55am-Noon 
Noon-1:30pm 
Noon-7:15pm 
1:30pm-3:00pm 
3:00pm-5:00pm 
5:00pm-7:15pm 
7:30pm-9:00pm 


Continental Breakfast 

Opening Leadership Presentation by Fran Dramis 
General Sessions 

Expo, Buffet Luncheon 

Interoperability and Solutions Demo 

General Sessions 

Technical, Technical/Business and Business Tracks 
Expo 

Gala Dinner and Entertainment 


Wednesday, October 


7:30am-8:30am 
8:30am-Noon 


Continental Breakfast 
Technical, Technical/Business and Business Tracks 


Learn from User Case Studies and Perspectives 


RICK MARLENE MARK JOHN CHARLES 


PETERSON RUPP PRICE 


BLACKMAN 


services e 
DIRECTV Fidelity 
Investments 


Carlson 3 
Companies Wells Fargo 


NCHES 


Corner Banca SA & 
Switzerland 


JASON 
HYON 


NASA- 
Jet Propulsion 
Laboratory 


Hear from Industry Leaders 


MARK DAVE MARK 
LEWIS ROBERSON 
EVP, New President EV ¢ 
Vent & COO M. nt Sto 
Hitachi Data VERITAS 
EMC Systems Software 


Brocade 
Communications 


BRIAN 


BREGMAN TRUSKOWSKI 


Aberdeen 
Group 


SCOTT RAY BRIAN 
STEGNER 


e Manager 
Lockheed 
Martin 


GARY STEVE CHARLES 
FRANCIS DUPLESSIE STEVENS 
C VP & Founder and C ate VP 


Enterprise Storage Divisio 
Storage Group Microsoft 


StorageTek 


call 1-800-883-9090 


(1-508-820-8159) 


the best 
conference for 
storage 


Mike Prince 
clo 
BURLINGTON COAT 
FACTORY 


+ 


the only 
storage network- 
ing conference 
that delivers 
all...” 


>* 


Gary Mountain 


MANAGER, TECHNOLOGY 
SERVICES 


IDAHO POWER 


the best 
chance see the 
latest storage 
technology 
one 


David Bent'ey 
TECHNICAL SYSTEMS 
ENGINEER 


PHILLIPS 
PETROLEUM 


true value for 
storage 


Doug Roberts 


MANAGER, SYSTEMS 
SERVICES 


HANNAFORD BROS. 


” 
| 
VP of IT Enterprise Director of Systems Architect IT Director Deputy Manager Sto ca VP of systems 
Operations and Business Enterpris arth Science Data Pr Architect Engineering 
Production Continuity Architecture e Systems Section Sprint Fannie Mae 


the Interoperability 
and Solutions Demo 
incredible ...” 


Executives and Managers Choose Storage Networking World! 


interaction with 


case users understand storage 


Robert Smalley Ray Dickensheets 
SENIOR PROJECT SPECIALIST SENIOR TECHNICAL ARCHITECT 
BANK MONTREAL SPRINT VICE PRESIDENT 
BLUE CROSS BLUE SHIELD COMPUTER OPERATIONS 
TENNESSEE WARNER BROS. 


Travel and Accommodations Pre-Conference Golf Outing 


IDG Travel is the official travel company for Storage Networking ae i i , STE, 
World. They are your one-stop shop for exclusive discounted rates SIDG Complimentary Golf Outing s } 
hotel accommodations. for Registered Users 


American Airlines the preferred airline for Storage The Pre-Conference Golf Outing the Walt 
Networking World. For information and discounts Disney World Resort Lake Buena Vista Golf 


20% on American Airlines call IDG Travel Services Course is complimentary ($125 value] for reg- — —— 
at 1-800-340-2262 or 1-508-820-8159. istered IT End-Users [other participants, : 


1 4 : including sponsors and vendors, may play on an “as available” basis 
OTe aan: and are responsible for all applicable golf outing expenses). 
visit www.etcentral.com 


Registration 


Earlybird Full/On-Site Package Includes: 
Options: Registration Registration Interoperability and Technical and Business Tracks, 
Re Solutions Demo, Expo, SNIA-produced Tutorials, SNIA- 
All Dollar Amounts in U.S. Funds (through Sept. 16th} lafter Sept. 16th) Meals & Receptions Certification “Test-Ready” Courses 
General Conference (Oct. $1,245 Yes Yes 


Total 4-day (Oct. 27, 28, 29, 30): $1,490 $1,690 Yes Yes Yes 
¢ General Conference Package 
© Technical and Business Tracks 
¢ SNIA-produced Tutorials (Oct. 27] 


NEW! “Test-Ready” Courses 
{see Web site for 


Expo, Interoperability and Solutions Demo, 
Meals Receptions Only Package 


Register Visit www.snwusa.com/fall Call 1-800-883-9090 


STORAGE 


NETWORKING 


WORLD 


*Includes Expo, Interoperability and Solutions Demo, Meals and Receptions 


SEPTEMBER 18-20, 2002 


The Westin Santa Clara Santa Clara, California 


You Have Heard the Promise. Now Hear the Reality. 


InfoWorld editors invite you take hard look how Web services’ technology affecting 
enterprise applications—from content management and collaboration business process 
integration. Hear both challenges and success stories from the executives who are 
embracing Web services and from the technology experts whose products are fueling this 
new era enterprise computing. 


Agenda topics include: 
Enterprise Application Vendors Rise Mobile Web Services 
the Challenge Mastering Asynchronous Web Services 
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Introducing Information Availability: The silver bullet from SunGard. 


business continuity plan can’t guarantee uninterrupted access critical business data. Even with redundant tapes, 


hardware, software and networks, single point failure may still pose risk. 
Information Availability solution from SunGard your bulletproof answer for keeping people and information connected. 


More than mere data protection, software and disaster recovery, Information Availability the net beneath you, providing 


information access 24/7. 

With much riding your data, makes sense partner with one the largest providers platform-independent 
and integrated solutions. For information availability worldwide, enterprises depend our secure, hardened facilities for 
computer centers and work areas, our dedicated redundant networks, and our trading floor and market data workstations. 


SunGard Availability Services integral part SunGard, company that 
serves 20,000 clients over countries and one the S&P 500. Compare 
your readiness other companies. Take our Information Availability Challenge SUNGARD 
www.availability.sungard.com/iac Availability Services 
The Net Beneath You 
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The Other Three 


BUDGETING SEASON APPROACHES, all managers are 
looking for ways reduce costs. While your supplier portfo- 
lio excellent place start, don’t beat every last cent out 
your vendors until you consider the three supplier- 
related cost reduction: repetition, redundancy and rigor. 


MORE THAN GAME 


Transportation, energy and other 
critical-infrastructure industries 
are stepping their participation 
cyberattack exercises means 
preparing for terrorist-related 
disaster. PAGE 


ACTS GOD 
AND VENDORS 


The events Sept. have drawn 
attention force majeure clauses 
contracts. Here are some 
things watch out for and steps 
you can take protect your com- 
pany from this typically vendor- 
controlled proviso. PAGE 


ECONOMY CAPS 
SECURITY SPENDING 


security spending has remained 
relatively flat since the attacks, 
caught the undertow bud- 
get cutbacks. But one thing has 
changed: growing number 
firms are taking business continu- 
ity into their own hands. PAGE 


GETTING THE MOST 
OUT OLD CODE 


Even before all the uproar over 
Y2k, William Ulrich was ardent 
evangelist about the need for com- 
panies inventory and then inte- 
grate their legacy applications into 
Web-based systems. his new 
book, lays out step-by-step 
plan for how it. PAGE 


CAREER ADVISER 


Fran Quittel offers guidance 
systems administrator with 
years AS/400 experience who 
wants update her skills, and she 
helps young worker explore 
career options after four years 
the video game industry. PAGE 


Repetition: Look for costs that recur automatically. 
Review monthly bills make sure you are using the 
product service for which you are receiving bill. 
While the individual amounts may seem relatively 
small, removing these errors will generate savings 
each month for years. For example, telecommunica- 
tions bills (which are often more than 100 pages long) 
may contain charges for unused lines services. 

Your asset management system may reveal other 
savings opportunities. Maintenance charges re- 
tired hardware can continue long after the box has 
become boat anchor. One firm’s clients found 
that was still paying several million dollars for an- 
nual hardware maintenance point-of-sale equip- 
ment that had been retired for several years. 

Redundancy: Eliminate redundant contracts and sup- 
pliers. takes time and money manage each one. 
Consolidation will reduce overhead and aggravation. 

Highiy decentralized corporations need closely 
examine their divisional contracts. Often, divisions 
hold contracts with the same suppliers. Replace divi- 
sion-level agreements with corporatewide contract. 

Reduce the number buyers your company, since 
each buyer represents significant overhead. Over- 
head includes the time takes coordinate with 
other buyers, well the time required become 
familiar with complex contracts, financial 
models and the architecture. Having 
fewer buyers not only reduces overhead, 
but also minimizes redundant buying de- 
cisions. The vice president procurement 
major financial services company said 
manager-level employees who can obligate 
$17 billion corporation.” 

Rigor: Rigor makes savings reliable and re- 
peatable. Try the following regularly: 

Consolidate your technology purchases 
obtain lower unit costs and ensure con- 
sistent pricing. 

Make sure your buying process con- 
tains checkpoints for both architectural 
and financial reviews. 

Before negotiating with suppliers, 


BART PERKINS, a former 
C!0 at Tricon Global 
Restaurants Inc. and 

Dole Food Co., is man- 

aging partner at Lever- 

age Partners Inc., which 
helps ClOs manage their 
IT suppliers. Contact 
him at BartPerkins® 
LeveragePartners.com. 


your homework anticipate their wants and needs. 
One well-known desktop lessor offered discounted 
lease rates client anticipation that would make 
additional profits from its new asset management 
service. And it’s common for vendors, when entering 
new vertical market, offer low prices the first 
few customers they agree serve references. 

Demand business cases from the executive spon- 
sor for all projects and kill projects that lack clear 
justification. 

Charge the beneficiary for services rendered. 
Everyone more careful about using resources 
when affects their budget. Make chargeback poli- 
cies consistent, understandable and fair prevent 
P&L pingpong sending charge someone else 
doesn’t affect your profit and loss statement. 

Let suppliers help provide rigor. One client saved 
18% its maintenance costs transferring its appli- 
cation maintenance (and staff) outsourcer. An- 
other client saved 40% buying systems adminis- 
tration service. Both clients were far more judi- 
cious about making changes when they realized they 
were paying “by the drink.” 

Use e-procurement for commodity and catalog 
purchasing standardize your buying process and 
ensure consistency. 

These savings will far easier 
achieve you’ve done supplier portfolio 
baseline first 31023]. The base- 
line provides road map for locating these 
and other savings. tells you where 
actually spending the most money 
(probably different from your “common 
knowledge” estimate) and tells you when 
spending money you weren’t aware 
(and wish you hadn’t spent). 

word caution: Don’t view outsourc- 
ing panacea. Never outsource one 
piece time without master plan. 

Use the three leverage your end-of- 
year cost-cutting measures. Repetition, re- 
dundancy and rigor are far more preferable 
the dreaded and demoralizing fourth 
RIF, reduction force. 
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ONDON, DEC. 21, 9:02 A.M.: The 
secretary the president 
Big Dollar Credit London 
gets phone call: “You have not 
lived your obligation. You 
will pay.” She reports you. 
the manager, you care? 

Two days later, mass 
electronic trading services 
goes off-line. Then they’re 
back online. Next, the 
phones down two 
your trading partners’ sites. 

Bombing threats are lodged against six 
London banking outlets. Now you care. 
But what you do? 

Welcome typical cyberterrorism 
exercise. 

The purpose the game rattle 
you, shake your confidence and push 
you into making critical mistakes. 
doing, your opponent wins the cyber- 
war, something U.S. government offi- 
cials and many professionals think 
more likely happen since Sept. 
June survey, 55% 395 professionals 
manufacturing, service, technology 
and other companies said they think it’s 
very likely that utility grids, financial 
institutions, communications systems 
and transportation infrastructure will 
the target major cyberattack 
the next months, according the 
Business Software Alliance, Washing- 
ton-based software vendor lobbyist 
group, which conducted the poll. 

Although one knows precisely 
what cyberattack will consist of, the 
common thinking among experts 
that will part multitiered as- 
sault physical structures and the 
computing networks one more 
critical infrastructure providers, such 
energy, communications, trans- 
portation, finance and emergency ser- 
vices companies. The cyber part would 


orporations are adding cyberattack exercises their 
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involve things such denial-of-ser- 
vice attacks and Trojan horses, in- 
sider damage and types attacks not 
yet thought of, say experts. 
The issue facing corporations and 
their departments how prepare 
and work with cross-section key 
players, including compa- 
nies other industries, 
emergency services, law en- 
forcement and government 
agencies, that all can ef- 
fectively play their roles 

recovery from attack the na- 

tion’s critical networked infrastructure. 

“We depend oil and gas lines be- 
ing operational, but you lose some 
those dependencies when cyber and 
physical attack hit simultaneously. How 
you recover? How you report?” 
says James Sample, manager informa- 
tion security the California Indepen- 
dent System Operator (ISO) Folsom, 
Calif., the state’s energy grid operator. 

The best way prepare through 
practice, say Sample and other experts. 

The number counter-cyberattack 
practice games being carried out still 
relatively low. But since Sept. more 
exercises have become available than 
ever before. For example, the Bethesda, 
Md.-based SANS Institute, a security 
education group, will hold exercise 
Washington next month. And the 
Seattle-based Pacific Northwest Eco- 
nomic Region, regional economic de- 
velopment forum, has launched 
cyberdefense training program called 
Blue Cascades, which conducted exer- 
cises June that were attended the 
California ISO and 120 electric power 
industry representatives from the Pa- 
cific Northwest and Canada. 

July, the Naval War College 
Newport, held its first cyberattack 
exercises for the private sector. The 
training was co-sponsored Stam- 
ford, Conn.-based Gartner Inc., which 
also co-sponsoring number oth- 
counter-cyberattack training exer- 
cises the coming months. 

Most games typically start assign- 
ing roles participants, such cor- 
porate vice president, public relations 
manager, law enforcement official, 
CIO manager, explains Winn 


é 
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MANAGEMENT 


Crafting Response Plan 


The best defense against cyberterror- 
ism good offense, says Kevin 
Nixon, chief security ofticer Exodus. 
That means getting buy-in from man- 
agement, assessing risk, and oversee- 
ing security and risk management 
processes, authentication, auditing, 
physical security and user security 
policies. But you still need response 
plan. suggests the following: 


GATHER THE FACTS: Interview business 
unit managers learn about key corporate 
services and information that must 
available emergency. Rernember mun- 
dane things like the number pencils need- 
should the accounting system down. 


SET TEAM: Typicai teams include the 


Schwartau, president Interpact Inc. 
Clearwater, Fla. Schwartau, who 
coined the phrase digital Pearl Harbor 
the early 1990s, started conducting 
cyberwar exercises for the military 
1995. After roles are assigned, partici- 
pants are put stage and Schwartau 
turns the heat. 

“Threats are piling up, communica- 
tions are failing, the weather really 
sucks, and the end throw fit and 
call them all incompetent jerks and 
storm from the auditorium,” says. 

the exercise done right, pro- 
fessionals will think, coordinate and 
perform better real emergency, 
says Stephen Northcutt, cyberattack 
exercise instructor for SANS. 

“If you’ve never been under mass 
fire and suddenly you are, the odds are 
that your brain will shut down and 
you'll everything wrong,” Northcutt 
says. “So the biggest benefit these 
games provide dress rehearsal 
you can develop actions out theory.” 

the very least, participants come 
away with healthy dose paranoia, 
says French Caldwell, Gartner ana- 
lyst specializing knowledge manage- 
ment. For example, says, during the 
Naval War College’s exercise July, 
large swath India experienced ma- 
jor power outage real event that 
part the game. 

But because the exercise, which 
was geared toward getting corporate 
executives think like potential 
cyberattackers, some the corpo- 
rate participants, among them chief 
security officers and from the 
financial, energy and telecommuni- 
cations industries, conjectured that 
maybe the outage was test bed 


vice president, executive communications 
manager, manager and legal counsel. 


ESTABLISH REPORTING PLAN: Typi- 
cally, the manager reports the internal 
disaster recovery team. But there are also 
outside organizations with which the man- 
ager needs cross-coordinate. These may 
include the manager energy compa- 
ny, and the Washington-based National 
structure Protection Center 
Reporting-structure plans should include 
items like diagrams lists showing whom 
Call goes the primary point contact 
unavailable, and the chain command. 


REHEARSE: Practice once year 
grand scale and more frequently the 
departmental level. 


cyberattack against the U.S. Another 
gaming event for response scenarios 
being planned, says Naval War College 
professor Craig Koerner. 

getting into the heads would- 
attackers, participants learned 
two things, Koerner says. First, they 
learned that terrorist’s target isn’t 
always going military one; in- 
stead, it’s often high-profile private- 
sector organization that’s selected for 
its impact critical infrastructure 
services, such the financial organi- 
zations and airlines that were damaged 
the Sept. attacks. 

Participants also learned that those 
infrastructure targets are more intercon- 
nected than they previously thought, 
says. For example, most companies have 
hours’ worth fuel stored for their 
backup electrical generators case the 
power should out, says Sample. But 
the blackout were last longer, there 
would way get more fuel for 
generators because also takes power 
run the pumps that dispense it. 

The example illustrates the vital 
need for coordination across geograph- 
boundaries and different industries 
and governments, Sample says. But the 
issue trust among these groups isn’t 
taken lightly, say Caldwell and others. 

It’s still difficult share information 
across industries and government 
agencies, they say. And the govern- 
ment’s own intelligence agencies, such 
the FBI and CIA, can’t even share in- 


CYBERATTACK RESOURCES 


Visit our Web site for links to more information about 
cyberattacks and how to prepare for them: 


QuickLink 32328 
www.computerworld.com 


formation with one another, Con- 
gressional report noted, adds Sample. 

“Now got private industry 
needing intelligence information that’s 
classified the government, [and] 
they can’t give us,” Sample says. 
“And always give them the in- 
formation that they want either.” 

That’s why the most comprehensive 
cyberpreparedness exercises bring to- 
gether people from different, interde- 
pendent sectors and government agen- 
cies and include practicing how infor- 
mation will shared, says Koerner. 

“When you game, you engage 
back-and-forth discussions and de- 
bates, but ultimately you learn coor- 
dinate with each other,” explains. 

Participants like the California ISO 
are also using what they have learned 
during cyberexercises hone their 
organizations’ cyberattack response 
teams and policies and conduct their 
own internal exercises, Sample says. 

Cyberattack response policy should 
feed into the overall business continuity 
and disaster recovery chain com- 
mand, says Kevin Nixon, senior director 
business strategy and chief security 
officer Exodus, Cable Wireless 
Internet Services Inc. subsidiary San 
Clara, Calif. Nixon also member 
the disaster recovery workgroup for 
the U.S. Office Homeland Security. 

Just like other disaster recovery 
plans, cyberattack recovery policy 
should identify the most critical infor- 
mation resources and the technologies 
housing them, develop backup policies 
for those resources, assign disaster 
response team and then rehearse, 
which what gaming exercises are all 
about, says Nixon. 

“Poor moments exercising bad 
judgment are when things fall apart,” 
says Thornton May, corporate futurist 
Guardent Inc. Waltham, Mass., 
who helped organize simulations for 
the Sector Summit, cyberterrorism 
preparedness conference held Wash- 
ington last month. Soon, such prepared- 
ness will mandatory industries 
that are deemed most critical for the 
continued operation the U.S. econo- 
and vital services, says May, Com- 
puterworld columnist. 

“The ability execute will big 
part corporate accountability this 
environment,” May says. 
“Simulating information security sce- 
narios practical tool that managers 
can use for making strategic security 
decisions real-world scenarios.” 


Rules the Game 


Northern California. Contact 
her derad@aol.com. 
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can leave your firm the lurch. Kathleen Melymuka 


INCE THE COLLAPSE the 
World Trade Center, new 
word has begun appear 
contracts. Vendors have 
been adding the word terror- 
ism the list events that 
can trigger force majeure claus- 
product and service contracts. 
This might not problem for you; 
the chances terrorism interfering 
with your software implementation 
may slight. But this new 
addition force majeure 
clauses opportunity 
for you more closely 
consider these often- 
overlooked clauses. 

Force majeure, French term mean- 
ing “major force,” refers wording 
many contracts and non-IT 
that stipulates that vendor’s failure 
perform isn’t breach contract 
results from cause beyond the 
vendor’s control. 

Force majeure has traditionally re- 
ferred “acts God,” such earth- 
quakes and floods, uncontrollable 
events, such wars and riots. The 1995 
Kobe earthquake, for example, kept 
certain LCD screen suppliers Japan 
from fulfilling contractual obligations 
with customers throughout the world. 

Such occurrences have been so rare, 
however, that user companies have 
paid little attention force majeure. 
was not uncommon for slide 
through because there were more im- 
portant issues, like service levels, that 
users were worried about,” says Diana 
McKenzie, attorney Gordon 
Glickson LLC, firm Chicago that 
specializes technology law. 

Then came Sept. ll, and suddenly 
terrorism joined the force majeure pro- 
viso, causing some contract nego- 
tiators take notice. They found that 


the definition force majeure has been 
quietly expanding. 

seen lot creep the langu- 
age that clause,” says Maureen Dor- 
ney, attorney Gray Cary Ware 
Freidenrich LLP Palo Alto, 
who negotiates contracts. “It’s get- 
ting broader and broader, which 
good you’re supplier and bad 
customer.” 

Force majeure longer limited 
acts God. Words and 
phrases such war, riot, 
strike, material shortages, 
civil unrest, labor unrest, 
fuel shortages and even fail- 
ure subcontractors per- 
form have been added some con- 
tracts, giving vendors legal excuses for 
nonperformance that attorneys say are 
over the top. While few companies 
have yet had major disputes over force 
majeure, some these new provisions 
could lead difficulties the future. 

Users “should not bearing the 
risk the fact that [the vendors] pick 
bad subcontractor,” says Doug Ey, 
attorney Helms Mulliss Wicker 
PLLC Charlotte, N.C., firm that has 
significant experience technology 
law. “That not beyond your control.” 

Neither are strikes. Last year, Larry 
Thomas, contract attorney 
Thomas Bonnabeau Minneapo- 

lis, negotiated for weeks get the word 
strikes removed from the force majeure 
triggers telecommunications con- 
tract for client, national health care 
firm. Thomas prevailed, and the con- 
tract was signed with the strike provi- 
sion excluded. Sure enough, the ven- 
dor’s employees did strike, causing 

delay for other customers, but not 
for Thomas’ client. The vendor was 
required complete the project 
time, subcontracted the work. 


Thomas also notes that the increas- 
ing use offshore subcontractors, 
especially politically unstable re- 
gions such India and Pakistan, raises 
the risk that force majeure will in- 
voked. And vague wording can provide 
excuses even the vendor isn’t direct- 
affected the force majeure trigger, 
McKenzie warns. “Some these [ter- 
rorist clauses] are broadly written 
that vendors can delay today [and] 
continue the delay long war 
terrorism continues,” she says. 


Know Your Needs 


Although companies include their 
legal departments contract nego- 
tiations, managers need edu- 
cated about force majeure because 
they may better position 
realize which clauses are likely 
cause trouble IT. 

the buyer, company can negoti- 
ate what and isn’t included force 
majeure trigger. some cases, com- 
pany might want exclude 
provision entirely. For example, force 
majeure clauses have business be- 
ing included disaster recovery con- 
tracts, McKenzie says. Otherwise, the 
same disaster that triggers the recov- 
ery service can trigger the vendor’s 
excuse for nonperformance. “Force 
majeure negotiated provision,” 
McKenzie says. “It doesn’t have 
the contract.” 

That also goes for deals involving 
critical computer systems like those 
for patient care point sale that 
simply can’t delayed vendor 
nonperformance. that’s the case and 
the vendor says can’t live without 
force majeure, find another vendor, 
McKenzie says. 

There are more potential difficulties 
these clauses. Some provisos, for 
example, say the buyer can’t terminate 
the contract during force majeure 
event, regardless the event’s duration, 
yet still require the buyer continue 
payments even though services have 
ceased. Even the contract does allow 
buyer terminate, the company may 
hamstrung confidentiality agree- 
ments that prohibit third-party access 
vendor products already place, 
says Elgin Ward, attorney and se- 
nior consultant International Com- 
puter Negotiations Inc., procure- 
ment consultancy Winter Park, Fla. 

There are many ways company can 
protect itself, but picking the right ven- 
dor should the first. sure the ven- 
dor has done what can assure that 
force majeure will never invoked. For 
example, does the vendor subcontract 
trouble spots around the word? 


ANASTASIA VASILAKIS: 
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Crafting the Fine Print 


Here are some items consider 
adding your contract: 


The vendor should relieved liabil- 
ity only have known about 
the force majeure event beforehand and 
have taken reasonable steps 

prevent it, and the event not only 
occurs but also actually prevents the 
vendor from performing. 


the vendor carry out its 
responsibilities because force ma- 
jeure, should still much can. 


The vendor should take reasonable 
action minimize the force majeure. 
the building burns down but 
has another location which could 
transfer the work, should so. 


The buyer should free obtain 
substitute performance without paying 

penalty during periods force ma- 
jeure, exclusivity clause. 


All payments other obligations 
the buyer the vendor should sus- 
pended during the force majeure event. 
the event continues beyond buyer- 
specified time (30 days, for exam- 
ple), either party should free 
clare the contract terminated. 

Kathleen Melymuka 


SOURCE: F. ELGIN WARO, INTERNATIONAL COMPUTER 
NEGOTIATIONS INC., WINTER PARK, FLA. 


dependent sole-source suppliers? 
Are its finances and labor relations sta- 
ble? Does have multiple sites? Does 
have good disaster recovery plan? 

“If the vendor’s disaster planning 
force majeure clause, doesn’t have 
very good disaster planning,” says. 
“Know who dealing with. It’s 
due diligence.” 


Melymuka Computerworld 
contributing writer. Contact her 
kmelymuka@earthlink.net. 
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MANAGEME 


Even with flat budgets, companies are taking business 
continuity into their own hands. Thomas Hoffman 


TRAGIC THEY WERE, the 
Sept. attacks were only 
temporary wake-up call 
slumbering CEOs who still 
don’t seem convinced 
the need open the cor- 
porate coffers and invest more 
security. 

Though the federal government has 
doubled security spend- 
ing within most agencies 
this fiscal year, the worsen- 
ing economy and resulting 
budget cutbacks have 
conspired keep increases 
for corporate security spending 
minimum. Average security spending 
has risen just $200,000 per organi- 
zation this year average $3.9 
million, according the ninth annual 
Network World 500 survey released 
May. Five hundred networking ex- 
ecutives companies with 1,000 
more employees took part the study. 

“Until there Exxon Valdez, until 
there obvious security breach 
that badly damages company’s repu- 
tation, there probably won't big 
push” increase security spending, 
says Cathy Hotka, vice president 
the National Retail Federation 
Washington. 

But combination events since 
the attacks, among them perceived 
over-reliance third-party service 
providers such as Comdisco Inc., has 
led many organizations re-evaluate 
their business continuity strategies. 
Like many other CIOs, Roy Swack- 


hamer CNF Inc. says that his Palo 
Alto, Calif.-based company had stan- 
dard practices place prior Sept. 
Surveillance cameras, identification 
badges and security personnel pa- 
trolling multiple facilities were used, 
along with IT-specific security systems 
for the company’s Windows and 
Internet systems. while spending 
has remained flat, Swack- 
hamer says the $4.9 billion 
provider global supply 
chain services has put aside 
build emergency opera- 
tions center about 25 miles away from 
its main campus Portland, Ore., 
case of an isolated disaster, such as a 
power outage fire. 

The reason? After Sept. ll, business 
continuity providers such Rose- 
mont, Comdisco and Wayne, 
Pa.-based SunGard Data Systems Inc. 
were inundated with more disaster de- 
clarations than they could handle, says 
Swackhamer. “That’s what the senior 
executives really stood and took 
notice of,” adds. 

spokeswoman for SunGard dis- 
missed claims that the service provider 
was “overwhelmed” with disaster dec- 
larations after the Sept. attacks. “Nei- 
ther SunGard nor Comdisco [Availabil- 
ity Solutions unit, which SunGard ac- 
quired November had those 
problems,” the spokeswoman said. 

SunGard estimates that used just 
10% 15% its legacy systems capac- 
ity following Sept. But SunGard of- 


ficials acknowledged that end-user 
seats for its Jersey City, NJ., facility 
were “fully utilized,” with overflow 
directed its Philadelphia site, where 
more than 100 end-user seats were 
left unused. 

CNF also discussions with an- 
other Portland-area Fortune 500 busi- 
ness about creating reciprocal agree- 
ment, whereby one the firms suf- 
fers fire facility-specific disaster, 
can move people and operations 
the other company’s facilities, says 
Swackhamer. The two firms are also 
discussing the possibility building 
joint facility handle the relocation 
people and systems the event 
regional disaster, says. 


Hole the Middle 


Other executives are making sim- 
ilar evaluations. For instance, Eastman 
Chemical Corp. built secondary tech- 
nology center miles from its Kings- 
port, Tenn., data center that went live 
March, says CIO Jerry Hale. The de- 
cision build the backup center was 
made prior Sept. Eastman Chemi- 
cal had determined that its systems 
had grown too complex receive and 
process electronic customer orders 
under three four days with the 
mainframe and distributed computing 
disaster recovery providers had been 
working with, says Hale. 

one the things rec- 
ognized that needed have 
more pragmatic view toward dis- 
aster recovery,” says Frank Hood, vice 
president information services 
Krispy Kreme Doughnut Corp. 
Winston-Salem, N.C. 

the time the attacks, the $621.7 
million company was scheduled test 
its business continuity preparedness 
SunGard site New Jersey. But be- 
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cause the vendor had field many 
disaster declarations from New York- 
area companies after the attacks, 
Krispy Kreme had conduct testing 
SunGard facility Chicago. 

Hood says understood the situa- 
tion, but the switch made him recon- 
sider his options. “For company like 
Krispy Kreme, time money, and 
even you can minimize your down- 
time few hours and control your 
own destiny, that’s the better route 
take,” he explains. 

Since then, Krispy Kreme has co- 
located Wintel-based Hewlett-Packard 
Co. e-mail file servers new manu- 
facturing facility Effingham, 
ensure redundancy e-mail, case 
link broken its headquarters 
Winston-Salem. While Krispy Kreme 
intends honor its contract with Sun- 
Gard for its remaining months, 
the company plans shift its backup 
processing Effingham once the con- 
tract ends, says Hood. 

Although funding for vulnerability 
assessments Krispy Kreme’s Inter- 
net and intranet systems was proposed 
before Sept. the attacks helped se- 
cure the investment with board mem- 
bers November, thus increasing 
Krispy Kreme’s annual security 
spending from about $15,000 
$20,000 about $50,000. 

But year after will security 
spending get enough extra punch? 
CEOs “can relate physical security, 
they can relate break-in, but they’re 
not aware what data security means 
their companies,” Hotka says. 


SECURITY PATCH WORK 


Many COs are finding that the large number of patches 
issued by software vendors are taxing their resources: 
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How financial justification for securing internal funding 
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Value 


Breathing 


Into Old 


“Worldwide, there are well over 
200 billion lines software 
that are fragmented, redun- 
dantly defined, hard deci- 
pher, and highly inflexible. 
These systems, which have been 
functioning for decades, 
have survived revolu- 
tions in software, hard- 
ware and the Internet. 
Now, with the 
cusp new era which 
handcrafted coding techniques 
are being supplanted compo- 
nent-based development and 
Web services, organizations 
run the risk of being mired 
down mountain legacy 
code.” 


Q&A 


omputer Code 


begins William 
latest book, Legacy Systems: 
Transformation Strategies 
(Prentice Hall PTR, 2002). The 
book, Ulrich’s third the sub- 
ject, provides step-by-step 
guide for incorporating 
critical data and func- 
tionality locked 
legacy applications 
into newer, Web-based 
systems. also lays out de- 
tailed deployment options for 
implementation teams. Even 
before all the uproar over Y2k, 
Ulrich, president Tactical 
Strategy Group Inc. Soquel, 
Calif., and former Computer- 
world columnist, was ardent 


evangelist about the need for 
companies first inventory 
and then integrate their legacy 
applications. talked about 
the issue recently with Com- 
puterworld’s Julia King. 


legacy systems are impor- 
tant, what’s holding companies 
back from consolidating and 
transforming them for use via 
the Web? The first challenge 
understanding what these sys- 
tems and how they relate 
back the business. lot 
these systems support cross- 
functional activity across the 
enterprise. 

When you need invoke 


change retool function 
that flows across organization- 
boundaries, you don’t know 
what’s impacted. What results 
extended delay. 


Didn’t companies gather most 
this information during their Y2k 
projects? The irony all 


that many organizations spent 
anywhere from $10 million 
$50 million $100 million 
Y2k projects. They spent all 
this money stabilizing their 
legacy systems without deriv- 
ing any value other than keep- 
ing them running. Some the 
Continued page 
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Tripwire” establishes a baseline of data in its known good 
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@ Ensure the integrity of your data 

@ Instant assessment of system state, reporting 
“integrity drifts” 


Maximize System Uptime 
™® Eliminate risk and uncertainty 


@ Enable quick restoration to a desired state 
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Find and fix problems quickly and precisely 
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Your firewalls and intrusion detection tools alone are 

not enough to keep systems trustworthy. Tripwire's data 
integrity assurance products are the only way to know 
with 100% confidence that your data remains uncompro- 
mised. For nearly 10 years Tripwire has been helping IT 
professionals know exactly what's changed on their 
systems, and heiping them to recover quickly 


For FREE 30-day 
fully-functional eval, 
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Continued from page 

other benefits they could have 
derived, they didn’t. They had 
inventory all systems, all 
applications and interfaces 
all systems one repository. 
But then, instead taking that 
and building upon it, they took 


those inventories and shoved 
them shelf deleted 
them and took the people who 
worked them and sent 
them out pasture, and 
lost all the intelligence that 
was derived from that Y2k 
window. 


What should companies 
doing? There should strat- 
egy behind how organizations 
whole are going ad- 
dress their legacy issues, 
each time issue comes 
doesn’t become fire drill 
one more quick-fix approach. 


Complete SAN LAN performance tools. 
Finisar has been offering its customers the necessary increase efficient 
network operation for over 14 years. Finisar’s family of network analysis and 
performance testing products ensure optimum performance through constant 
monitoring, measuring and analysis; locating and repairing problems before 
they cause impact. 


Listening to customer needs, we develop products that are flexible and scalable 
to grow and evoive with today’s SAN and LAN environments. No other company 
offers products as easy-to-use and easy-to-implement. 


Take test drive. 


Remove the gridlock from your network. Test drive Finisar Performance Tools at - 


www. finisar.com/testdrive 


NetWorid+interop/Comdex, Atlanta # Storage Decisions 2002, Chicago # Gartner IT, Orlando 
San Diego, San Francisco, Seattle, Chicago, Dallas, Atianta, Boston & New York 


CTIA Wireless, Las Vegas 
For more details: 


Understand your systems 
macro level. Know what sys- 
tems support which users and 
which customers. 


skills factor this 
whole issue? believe it’s more 
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what needs done and 
how approach it. get 
e-mails all the time from peo- 
ple with mainframe skills who 
are available work. 
don’t think we’re lacking the 
technical skills. think right 
now lacking the execu- 
tive leadership undertake 
these initiatives. 


But money talks. there not 
compelling business reason for 
companies launch these lega- 
integration transformation 
projects, you call them? 
there’s situation where mul- 
tiple business units are doing 
the same things and they’re 
supported multiple redun- 
dant systems, there’s huge 
savings had. Once you 
understand this issue, you can 
start see the [problems 
causes] your day day-to-day 
life. For example, had long- 
distance telephone service 
provider call six times try- 
ing flush out problem 
account. Six people from 
the company told this 
problem was their database, 
and each time give them 
confirmation code, none 
them could check that confir- 
mation code against their sys- 
tem. All were working the 
same company, but they were 
working with six different 
databases with wrong infor- 
mation about account. 
This same organization talks 
about cutting costs and getting 
rid its people. The way 
cut costs consolidate 
databases and get rid five 
the six people who called me. 


What can managers doing 
address this legacy issue, if, 
you say, the decision-making 
power the hands CEOs 
and chief financial officers? The 
managers are pretty smart 
about this topic, but they 
aren’t going put their job 
the line bring this issue 
head. The manager does 
continue wave flag, 
though. Try articulate 
about what needs ac- 
complished. Walk into senior 
management with variations 
approaches that impact the 
underlying architecture. Take 
look benefits that can 
derived along with the costs. 


; 
Pee 


Then again, can you really afford gamble with your corporate data and brand? 
Which prompts the question: you protect your enterprise from Trojan horses and spyware programs now, then when will you? 


Fortunately, Zone Labs offers simple, proven, and affordable way stack the odds your favor. Our security solutions maintain 
your good reputation and safeguard critical data protecting your enterprise network from hacker attacks that evade perimeter 

firewalls, antivirus, and IDS. fact, Zone Labs the distributed solution that protects data and productivity 
securing vulnerable remote and mobile PCs. whether you need centrally managed security stand-alone solution, Zone Labs 
safe bet protect your entire enterprise network. 


see how your company measures up, complete free security risk assessment call 
1-877-876-4960. Chances are, will have the right security solution for your needs. 
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Zone Labs Integrity protected under U.S. Patent No. 5,987,611. Reg. U.S, Pat. & TM Off. v.080902 
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Dear Alice: 


Linux way reducing 


MANAGEMENTCAREERS 


ear Career 


I’m systems administrator with years experience, 
mainly the platform. addition ad- 
ministration duties, program both Cobol and RPG 
IV. What new skills need keep pace with the mar- 


ket and enhance chances for advancement? 
ANN ARBOR ALICE 


merly the AS/400) now sup- 


You should consider adding 
Linux your base exper- 
tise, according Adam Jol- 
lans, manager IBM’s 
Somers, World- 
wide Linux Marketing Strat- 
egy Software Group. 

Hardware, software and 
database vendors such 
IBM, Sun Microsystems Inc., 
Hewlett-Packard Co. and Ora- 
cle Corp., well govern- 
ment and commercial end 
users, are moving least part 
their operations over 


costs and expanding vendor 
relationships from working 
with just one taking 
open-source approach. 

“IBM invested billion 
and has nearly recouped that 
investment, completing 4,600 
customer engagements and 
reaping 300 customer refer- 
ences,” notes Jollans. 

Should this sort move 
appealing you, first visit 
www.ibm.com/ervers/eserver 
/iseries/linux/, since IBM’s 
eServer iSeries platform (for- 


WORKSTYLES 


ports Linux. Then for cer- 
tifications from the Brampton, 
Ontario-based Linux Profes- 
sional Institute (www. lpi.org) 
Raleigh, N.C.-based Red 
Hat Inc. 

These are especially good 
strategies because will allow 
you acquire the knowledge 
and get yourself started 
area that puts you somewhat 
ahead the curve. 

“Linux skills around IBM, 
and Sun are very portable,” 
says Jollans. 


Finally, you should under- 
stand that while moving down 
this new path will certainly 
stimulating, isn’t entire- 
risk-free, and it’s best 
have suite in-depth tech- 
nical skills that all build 
one another. 

People who have back- 
grounds Linux, Microsoft, 
Cisco, DB2 Oracle with 
experience application in- 
frastructure, network topology 
and databases can make six 
figures, even the current 
economic environment. 

For look the 
merits Red 
Hat certification 
vs. vendor-neu- 
tral one from the 
Linux Profession- 
Institute, check 
out recent salary 
survey from Com- 
puter Reseller 
News the Web 
www.crn.com/ 
ssurvey/ssurvey02. 
asp? ArticleID= 
35952. 


How would you describe the 


Helps Carlson 


Build Relationships 


What are the most critical sys- 
tems supported your depart- 
ment? “Our company designs 
and executes relationship 
marketing programs that 
allow our customers build 
better relationships with con- 
sumers, partners their em- 
ployees. group develops 
and supports the database 
and applications used au- 
tomate various aspects 
those programs. support 
close custom applica- 
tions for various clients 
any given time. example 
might consumer loyalty 
program, such frequent- 
flier program. 

“Our business operations 
staff loads all the consumer 


activity onto the system, 


which the end the 
month generates the reports 
and sends out statements 
all the program participants. 
back-office piece 
internal operations staff uses 
and client-facing piece that 
viewable through the Web.” 


How would you describe the 
pace the work? “It’s steady. 
been very busy this 


year, and the challenge 
time market. The time 
from idea execution 
very short. Clients don’t 
want wait months 

launch new marketing 
campaign.” 


pany? “We have our own 
identity group, and yet 
are very aligned with the 


business. For instance, all the 
leaders report the 
respective general managers. 
And all our people are 


co-located with operations 
and administrative people 
who use the system. When 
: we have client meetings, 


typically brought into 


those meetings. They know 


Marketing Group 


Interviewee: Bob Keller, senior director 


Minneapolis-based Carlson relation- 
ship marketing company that designs mar- 
keting solutions such performance im- 

provement and consumer loyalty programs. 


Number employees: 150 the 
U.S.; nearly 300 worldwide 


technology 
ponent the value bring 
they want our input. 

“We have day care 
campus, flextime, and 
provide laptops and virtual 
private network connectivity 
for people who need 
home. 


What you like best about 
how career advancement and 
training are handled your 
company? “We have em- 


Carlson 


FRAN QUITTEL is an expert 
in high-tech careers and 
recruitment. Send 
questions to her at 
www.computerworld.com/ 
career_adviser. 
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Dear Career Adviser: 


science and have worked the 
video game field. have about 
four years experience Web 
development, but would like 
work other markets. 

GROWING 


Dear Growing: 


Your background perfect 
for developing “immersive” 
interactive virtual reality plat- 
forms and systems, says Lance 
Loesberg, executive vice presi- 
dent VirTra Sys- 
tems Inc. Ar- 


will want show 
that you can inte- 
grate variety 
devices that ac- 
commodate track- 
ing capabilities 
and develop 
360-degree world. 
This may involve 
using artificial in- 


graphics, sound 
3-D 


ployee task force within the 
IT organization, and three 
years ago, the group came 
with suggestion offer 
on-site master’s software 
engineering program for 
people who might inter- 
ested getting advanced 
degree. worked out 
with the University St. 
Thomas, and not only 
offer it, but the company 
pays for it. 

“Our first people are 
graduating December, and 
got another group 
about halfway through.” 


What you think makes your 
company’s department 
unique? “People get the op- 
portunity work directly 
with clients the company. 
work small teams, 
you also get exposed all 
aspects the software de- 
velopment life cycle early 
your career.” 
Mary Brandel 
brandels@attbi.com 


lington, Texas. You 


telligence, comput- 


weds 
q 
d 
: 4 
$ : 
3 H 4 


with one 


Just point your 
mouse the 
world’s best 


careers site. 


Brought 
you 
Computerworld, 


InfoWorld and 
Network World. 


Find out more. 
Call your 
Sales 
Representative 
Janis Crowley, 


1-800-762-2977 


Where the best 
get better 
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PeopleSoft Applications Analyst 


wanted by Multi-Nat't Mktg Com- 
munications Co in Manh. Pro- 
vide PeopleSoft tech support; 


write specs; modify existing appis 


& reports; implement upgrades 


Bach in Comp Sci & 2yrs exp in 
job offered req. Respond to: 
JK/HR Dept, PO Bx 4241, GCS, 


NY 10163 


Inertial Sys co sks Microcntrier 
S/W Engineer. Dvip Microcntrier 
S/W using debugger for serial 
comm. of inertial/rate devices w/ 
C, C++, C# & rate table. Req: 
2 yrs exp & BS in CS/EE Res: 
Inertial Science 3533 Old Conejo 
Rd # 104, Newbury Park, CA 


91320 


DATABASE ADMINISTRATOR. 
Bachelor's degree or foreign de- 
gree equivalent in Computer Sci- 
ence, Computer Engineering, or 
a closely related field required 
Must hold three years experi- 
ence in database administration 
using Oracle and Oracle 
DRUMS in programming. Work 
hours: 8 am to 5 pm, M-F. Send 
resume to Natalyn-America’s 
Collectible Network, Inc., 10001 
Kingston Pike, Suite 57, 
Knoxville, TN 37922; Attn: Job 
Code DAB. 


Computer Professionals w/exp 
in DELPHI, Sybase, SQL, JAVA, 
Star/Team, ERWin, Dataflex, MS 
SQL Server, ORACLE, UNIX, 
LINUX, HTML, XML, Windows 
9*/NT/2000. Apply to Triple Point 
Technology, Inc., 301 Riverside 
Avenue, Westport, CT 06880. 


Comp. Oracle Administrator 

Euro Solutions Group dba e 
Solutions Group seeks an Oracle 
Application Database Adminis- 
trator in our New York, NY loc 
Position involves all DBA activities 
including system development 
life cycle, data analysis, system 
design and dev't, testing + im- 
plementation. Support global 
databases on-site + remotely. 
Liaise with international clients 
Must have a B.S. in Comp. 
Sci. or related field and 3 yrs of 
relevant exp. Applicants send 
résumé to e:Solutions Group, 
H.R. Dept, 420 Madison Ave., 
#1101, New York NY 10017. 


Call your 
Sales 
Representative 

Janis Crowley. 


1-800-762-2977 


Principle Software Engineer: A 
supplier of world class circuits to 
world-known PC manufacturers 
is seeking a Principle Software 
Engineer who will act as project 
leader and guide junior engi- 
neers in developing drivers 
under Win 98/me/2000 that will 
handle PnP messages and pass 
the WHQL tests. Req'd: B.S. 
degree in Engineering, Computer 
Science, Information Systems or 
related with 5 yrs exp in the 
job offered or as Application 
Software Developer. Exp w/USB 
driver development & kernel-level 
debugging. Exp w/Win OS archi- 
tecture, MS SQL Server 6.5, 
Visual BASIC & C/C++. Standard 
Microsystems Corp., 11000 N 
Mopac Expressway, Stonelake 
Bidg. 6, Austin, TX 78759; Attn: 
Rick Karl 


Software Engineer wanted to 
perform data storage software 
design, development, and main- 
tenance, system documentation 
and related duties. MS in Com- 
puter Science and 2 yrs related 
experience required. Send 
resume to Data Reliability tric 
3895 Metro Drive, Jackson, MS 
39209. 


Support Analyst, Information 


Technology Company - Provide 


technical support to clients for 
company's proprietary software 
applications; maintain custorner 
support database; test new 
products. B.S. in Computer 
Sciences or related field. Salary 
commensurate with exp. 40 
hrs/wk, 8 AM - 5 PM, M-F. Mail 
resume to: Info Tech, Inc., 5700 
SW 34th Street, Gainesville, FL 
32608. 


Prog/Analysts to analyze, design 
develop appis using Java 
HTML, Javascript, UML, XML. 
Oracle, Dev 2000, Designer 
2000, Rational Rose, under 
Windows, Unix and Solaris envi- 
ronments; perform business 
collaboration, process/data 
modeling using SDLC/OOPS 
BS or foreign equiv & 2 yrs exp 
in IT. High salaries, F/T. Travel 
involved. Resumes to Bahwan 
Cybertek Technologies, inc. 209 
West Central Street, Suite 312, 
Natick, MA 01760. 


Programmer Analysts needed 
Seeking qualified candidates 
possessing 2 yrs of college or 
equiv. and 2 years work exp 
using Progress Database, Unix 
and EDI procedures. Duties 
include: Design, study, code and 
test software systems and pro- 
grams. Write programs, interfaces, 
and EDI procedures. Work with 
Unix, VB, Symix, and Autocad 
EOE. Mail res., ref. and Sal. Req. 
to Attn: Human Resources, C. 
Lee Cook, A Dover Resource 
Company, 916 S. 8th Street, 
Louisville, KY 40203. 


Infowave Systems, Inc, an IT 
consulting firm in Wilmington, 
Delaware is seeking individuals 
for the following positions to work 
at client sites throughout the US: 


Programmer Anailyst- requires 2 
yrs exp in software development 
and B.S. in Computer Science 
or related fieid. Must have exp 
using Oracle RDBMS, PL/SQL. 
Forms, Reports, Database tuning, 
Oracie Application Modules, 
Shell Scripts on Unix and Win- 
dows. 


System Analyst- requires 2 yrs 
exp in Software Systems Analysis 
and Architecture with B.S. in 
Computer Science or related 
field. Must have exp using Ratio- 
nalRose, UML, and Used Cases. 
Programming experience in 
Internet Technologies on NT and 
UNIX. 


Programmer Analyst (SAP and 
Internet): 2 yrs exp in imple- 
menting web enabled modules, 
particularly SD/MM, utilizing 
SAP SD/MM Ver. 4.0 above, 
CRM, HTML, JavaScript, PERL, 
ARIS, MS Project and RDBMS 
and B.S Computer Science or 
related field. 


Apply to: Infowave Systems, 
1701 Shallcross Avenue, Suite 
B-6, Wilmington, DE 19806. 


Marketing Director for computer 
printer technologies company 
located in Chantilly, Virginia 
Minimum two years experience 
directing the marketing activities 
of a computer printer technologies 
company, including researching 
and identifying new technical 
requirements and specifications 
for products, communicating 
strategic and tactical product 
requirements to engineering, 
working with engineering to 
develop new product features, 
researching potential target 
markets for products, developing 
pricing strategies to maximize 
market share, directing and 
administering company market 
ing program, and directing and 
managing the creation of new 
product collateral. The position 
is located in Chantilly, Virginia 
with 25% domestic/international 
travel. Send resume to Human 
Resources, Genicom, LLC, 1 
Solutions Way, Waynesboro 
Virginia 22980. 


Senior Systems Consultant 
recommend systems solutions & 
implementation; develop, track & 
manage project plans; perform 
functional consultation for cus- 
torners & clients; prepare complex 
recommendations & proposals; 
analyze, design, develop, code, 
test & implement systems software 
utilizing knowledge of & exp. w/ 
Vantive, Oracle 7.x/8.x, PL/SQL, 
VBScript, Unix Shell Scripting, 
Developer 2000 & HP-UX; tune 
& troubleshoot current technical 
applications & systems software 
lead teams of systems consu!- 
tants, analysts & programmers; 
Requires BS (or MS) in computer 
science, information systems or 
engineering, plus 6 YR related 
exp. (4 YR exp. with MS). Please 
apply online at http://www. 
bellhowell.com/mmt/careers 
1530.shtm! or email to resume 
durham @ belihowell.com 

Please reference Requisition 
#100V 


Software Engineer - Williamsport, 
PA. Experience in design and 
development of applications 
using SAP ABAP/4, Oracle, Visual 
Basic, C++ and Unix. Relocation 
within USA Possible. Attractive 
compensation package. Send 
resume to Supriya Palayekar, 
Palayekar Companies, inc., 
1959 East Third Street, 


Williamsport, PA 17701 


Radiant Systems, Inc. a Nation- 
wide Technology provider located 
in NJ, CT, TX & FL req Computer 
Professionals with Hardware 
and/or Software skills including 
C, C++, Java, Java Scripts, Perl, 
HTML, SQL, Pro*C, Visual Basic 
Visual C++, Gupta-SQL, Power- 
builder Crystal Reports, MFC, 
Windows SDK, Oracle, Informix 
Sybase, Developer 2000, Lotus 
Notes, Lotus Script, Unix, Win- 
dows NT, Windows 97, Reai 
Time Embedded System HP- 
Unix, Admins, Sun OS, Help 
Desk/PC-Support, SAP, R/2- 
R-3, ABAP/4, SAP Scripts, JD 
EDWARDS, PEOPLESOFT, 
COBOL’ CICS/OBS, !IDMS. 
AS/400, MVS, RPG/ 400 Win 
Runner, Load Runner, MS- Test, 
SQA Suite, SNMP, RTOS, COR- 
BA, ASP, Active-X, DTM/TDMA, 
FOMA, Routers, ATM Switch, 
DOSP/ ATM, FRAME RELAY, 
TCP/IP, ISON, COM, DCOM, 
ASP, SAS, DSOS, VS WORK, 
Assembly Acics, Designer, Hard- 
ware Architecture, HDL, 
SONET/SDH, SNMP, HP Open- 
view, Map Info/Arc Info Project 
Managers, Technical Writers. 
Candidates w/a BS (or equiv) & 
2 yrs exp. as Programmer Analyst 
and/or MS (or equiv) & tyr exp. 
as Software Engineer. 
Excellent Benefits 

Apply to: E-Mail: RADIANTS 
@RADIANTS.COM 

Attn: Human Res. Dept., 107 a 
Corporate Bivd, S. Plainfield, NJ 
07080. 


Unix System Administrator for 
many flavors of Unix incl. Compaq 
Tru64 Unix, Sun/Solaris & Linux 
Maintain h/ware reqd for ail flavors 
of Unix servers & workstations 
Provide & maintain develop: 

tal & teaching tools & ut 
needed to support academic com- 
puting. Maintain Directory, Email 
& Web svcs needed for admin 
computing. Other responsibilities 
inct: s/ware installation/upgrades. 
documentation dvipmt, perfor- 
mance tuning, backup & recovery, 
troubleshooting & consuiting 
w/vendors & developers, capaci- 
ty planning, configuration mgmt. 
user support. Will work closely 
w/n/work administrators. 
Helpdesk staff & campus facul- 
ty/staff. Responsible for day-to- 
day maintenance & backup of all 
systems & applics. Coord student 
technicians in processing of new 
accts & user system access/se- 
curity. Reqs demonstrated ability 
to manage file system & support 
educational community. Bach in 
Comp Sci & 2 yrs exp specific to 
Position reqd. Must be well versed 
in Unix sheli scripting, C/C++ 
Perl, TCP/P & client/server, 
Niwork Svcs: DHCP, DNS, Send- 
mail, NFS, NIS, Radius, FTP, Web 
& MS Office. Knowl of WinNT &/or 
VAX VMS, LDAP (Oracle, Cisco 
routers) a+. Qualified persons 
should send itr of application, cur- 
rent vita & 3 refs to Diana Catley, 
HR Dept, Ref#867, Ramapo Col- 
lege of NJ, 505 Ramapo Valley 
Rd, Mahwah, NJ 07430-1680 or 
email: dcatley @ ramapo.edu 


HRMS Customization Software 
Engineer- Cordova, Tennessee 
Part of a team responsible for the 
analysis, design & customization 
modification of PeopleSoft HRMS 
system in an Oracle & UNIX 
environment. Will utilize People- 
Soft version 8 technologies in- 
cluding People Tools, Application 
Engine & SOR to customize &/or 
write batch processes. Must 
have a BS degree or equivalent 
with major field of study in Comp. 
Sci, Engineering or related field. 
Must have 3 yrs of exp. in the job 
offered or 3 yrs of exp. in a pos‘- 
tion involving PeopleSoft HRMS 
Customization/modification in an 
Oracle & Unix environment. Exp. 
mentioned may have been 
obtained concurrently & must 
include 2 yrs of exp. working with 
PeopleSoft version 8, including 1 
year of exp. each in PeopieToois, 
Application Engine & SQR. Must 
have legal authority to work 
in U.S. Please send resume to 
S. Muhammad, Union Pilanter's 
Corporation, 7130 Goodlett 
Farms Parkway, Cordova, TN 
38018. 
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Senior Software Engineer - 
analyze, design, develop, test & 
implement eGovernment appli- 
cations/products using knowl- 
edge of & exp. w/ RDBMS (Oracle, 
MS SQL Server), Unix Shell 
Script, Unix Utilities (lex, yacc, 
awk), Java, JavaScripts, Java 
Swing, JDBC, Pro*C, C++, C, 
Unix (Sun Solaris) & Windows 
2000/NT; manage on-site & 
remote development teams 
Requires: Web & Application 
server use & maintenance exp.; 
BS (or MS) in computer science 
or information systems + 7 YR 
related exp. (5 YR w/ MS); atleast 
2 YR exp. in eGovernment 
applications. interested candidates 
e:mail resumes to kroehling 
@nicusa.com. 


Software Engineer Needed to 
develop middie-ware components 
for real-time management and 
testing of various network de- 
vices utilizing a common platform 
to manage CDMA, TDMA, GSM 
and other environments. MS 
in C. Science or related fieid & 
programming experience in 
Java, XML, CORBA, Visibroker 
required. Send resumes/salary 
history to:Alexander Gavrilov, 
SoftTrend, Inc., 6160 N. Cicero, 
Suite 124, Chicago, IL 60646. 


Principal Software Engineer will 
design, develop and maintain 
software using COM/DCOM on 
NT/2000 platform for middie-tier 
of a 3-tier architecture for Com- 
pany's Fixed Income division. 
Will deploy and administer com- 
ponents, written with programming 
languages (Java, C++, Visual 
C++, Visual Basic, C#), under 
application servers: MTS and 
COM-+. Will use JOBC/OLEDB 
for accessing data from data- 
base (Sybase and AS400). Will 
aiso write ASP pages using 
VB Script and Java Script and 
deploy them under IIS. Requires 
Bachelor's or equivalent in Com- 
puter Science, Engineering. 
Mathemaucs, Business, Statistics, 
or Physics, plus five (5) years 
experience in Job Offered OR 
five (5) years experience in 3- 
tier client/server architecture 
OR Master's or equivalent in 
Computer Science, Engineering, 
Mathematics, Business, Statistics, 
or Physics, plus three (3) years 
experience in Job Offered OR 
three (3) years experience in 3- 
tier client/server architecture 
Candidate must also possess 
demonstrated expertise devel- 
oping and de~oying Middleware 
using COM, OCOM, MTS, and 
COM+; demonstrated expertise 
programming in Java, C++, and 
Visual Basic; and demonstrated 
expertise programming Sybase 
connectivity. Salary: $75,700 
yr, M-F. 9AM-5PM. Send 2 
resumes to Case #2002-402 
P.O. Box 989, Concord, NH 
03302-0989. EOE. Applicants 
must be U.S. workers eligible to 
accept full-time employment in 
US. 


COMFORCE Information Tech- 
nologies, a leading technical 
staffing company currently seeks 
applicants for the following posi- 
tions in its Duluth offices: Senior 
Systems Analyst. Applicants 
for this position must have a 
bachelor's in computer science. 
engineering, or related field plus 
five years of experience in pro- 
gramming and coding with 
PL/SQL and SQL Server to 
include three years experience 
programming and coding with 
HTML, Java and JavaScripts. 
For consideration, please forward 
your resume and letter of interest 
by mail to: COMFORCE Infor- 
mation Technologies, Resource 
Manager, 6470 East Johns 
Crossing, Suite 170, Duluth, GA 
30097. Do not email resumes. 
EOE 
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Systems Administrator Senior 
Standard & Poor's is seeking 
resumes for the position of 
Senior Systems Administrator i! 
to work in Englewood, CO. This 
position acts as a technical advi- 
sor in the administration of 
an enterprise production UNIX 
environment consisting of net- 
worked servers and workstations. 
Is responsible for hardware, soft- 
ware, operating systems, config- 
uration planning, installation, 
maintenance, technical support, 
capacity and performance moni- 
toring, disk optimization, file sys- 
tem integrity; system tuning, and 
troubleshooting. Designs sys- 
tems and oversees installation of 
hardware and software. Provides 
technical support to staff. Man- 
ages system security and system 
resources. Conducts evaluations 
and recommends software and 
hardware products. Ensures cre- 
ation and implementation of sys- 
tem backup and recovery. De- 
signs, programs, and implements 
system utilities and scripts. Es- 
tablishes and enforces stan- 
dards. Serves as project manag- 
er. Approves decisions, delegates 
responsibilities, assigns tasks, 
and supervises other system ad- 
ministrators and technical sup- 
port personnel. 

Minimum requirements: bache- 
lors degree in computer science. 
information systems, engineer- 
ing, or related field, including eco- 
nomics; three years of experi- 
ence in systems administration; 
and comprehensive working 
knowledge of UNIX Solaris oper- 
ating system, a wide variety of 
third-party tools, communication 
protocols, and a broad knowl- 
edge of computer systems hard- 
ware, software, operating sys- 
tems, and utilities. 

Please send resumes by mail to 
Kathy Slabach, Job Reference 
No. DW82002, 7400 S. Alton 
Court, Englewood, CO 80112 
Standard & Poor's is an equal op- 
portunity employer 


PS Info Tech, LLC, a Colorado 
Springs, Colorado, software 
development and consulting 
company, seeks applications for 
the position of Programmer/ 
Analyst. Engage in full-life cycle 
software development in an IBM 
mainframe environment. Use 
COBOL, REXX, and C program- 
ming language, SAS reporting 
language, CICS, GUls, JCL, CA- 
7 and CSP development tools, 
and other languages and tools in 
the development and consulting 
process. The position which is 
located in Colorado Springs, 
requires a bachelor's degree or 
foreign equivalent in computer 
science, engineering, or a related 
field, including mechanical engi- 
neering; two years of software 
development experience in an 
IBM mainframe environment, 
and working knowledge of CSP, 
CA-7, SAS, and C programming 
language. Please send resumes 
by mail to PS Info Tech, LLC, 
5152 Prairie Grass Lane, 
Colorado Springs, CO 80922 


Analyst: The Trane Company, a 
manufacturing and sales company 
is seeking a Lead Development 
Analyst to analyze company 
financial service operations and 
existing Risk Management Sys- 
tems in its La Crosse Wisconsin 
office. Qualified candidates must 
have a Bachelor's Degree in 
Computer Science, at least 5 
years experience as a Software 
/Systems Engineer or 
Programmer Analyst, extensive 
experience with Powerbuilder, 
Powerbuilder Foundation Class 
and Power Tool, 3 years experi- 
ence with application develop- 
ment using Oracle, and 2 years 
experience working with con- 
struction industry risk manage- 
ment practices. Interested appli- 
cants should mail resumes and 
salary requirements to Ms. 

Kathy Reynolds, Ref. # ML1000 
at 3600 Pamme! Creek Road, 17- 
2, La Crosse, Wisconsin 54601 

An equal opportunity employer. 
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Sr. Site Research Analyst wanted 
to research and develop com- 
plex world-wide web servers. 
Bachelor's degree in Computer 
Science and 3 years experience 
required. Send resume to Yo- 
diee, Inc., 3600 Bridge Parkway, 
#200, Redwood Shores, CA 
94065 


Software Engineers (idaho Falls). 
Design, develop, test and imple- 
ment specialized multi-country, 
multi-site, ERP and CRM appli- 
cations in JD Edwards One 
World XE and related tools, 
XML, VB, SQL, and Windows 
MS, Sc./Engg. and 3 yrs. exp. in 
job offered or BS, Sc./Engg. and 
5 yrs. progressive post bac- 
calaureate exp. reqd. (or foreign 
equiv.) Prevailing wage/benefits. 
Melaleuca, Inc., Attn: Human 
Resources, 3910 South Yellow- 
stone Highway, Idaho Falls, 
Idaho 83402. No phone calls 
please. EOE 


SOFTWARE DEVELOPER - 


LUMEDX has an opportunity 


for a Software Developer. 


Requires BSCS or equiv. 


Send resume to: employment 


@\umedx.com. EOE 


Venturi seeks Prog./Analyst 
for Kirkland, WA office. DESC 
Prov. comp. sys. consult. to max 
1.S. efficiency. Anlyz. bulk data for 
migration into CRM sys. Dsgn, 
dev, & impi. ROBMS & web 
based & distrb. tools & s/w util 
SQL, VB, ASP, VBScript, JScript, 
Win. o/s. Config. & maint. corp. 
web servers. REQ: BS in Engr, 
CS, Math, or Physics + 2 yrs. 
exp. dsgn, dev, & imp! RDBMS & 
distrb. tools & aps. util. SQL, VB, 
ASP, VBScript, JScript, Win. o/s. 
Prem. sal. + benes. Pls. reply to 
J. King, Job# VT-102, 11255 
Kirkland Way, Kirkland, WA 
98033 


Analyst (network systems & 
data communications) - perform 
analysis, design, testing, evalua- 
tion etc. of LAN/WAN & other sys- 
tems. Research & recommend 
proper hard-/software to users. 
Maintain, troubleshoot & assist 
users w/ programs & implemen- 
tations. Resolve technical issues. 
Coordinate overseas offices w/ 
user requirements, design, devel- 
op & solutions. Requires: BS- 
Computer Science ( or equiva- 
lency); Microsoft Technologies 
Certification; 2yrs exp in comput- 
er software solution develop- 
ment. $36K/yr ( 40hrs/wk). Apply 
with CV to: Sri Vepa, Systems 
Hardware Inc. 661 Brea Canyon 
Road, Suite 5 Walnut, CA 91789 


SAP H.R. APPLICATIONS 
CONSULTANT, 8am-5pm, Re- 
search, develop and design 


computer software systoms as 


they relate to HR management 
functions such as payroll, bene- 
fits and time management. Re- 
quired: proficiency with SAP HR 
and SAP ABAP/4, ASAP Cert., 
B.S. in IT or related field, or 
equiv. Cedar Inc., Send Resume: 
glenda.soderstrom @cedar.com 
or fax: (410) 752-2879. 


Programmer/Analyst (Newark, 
DE)-Analyze, design, program 
& implement advanced comp 
applications for Web Based 
Drug Tracking Systems using 
program devpimt tools. Define 
req., test & implement systems 
Req. Bachelors in Comp. Sci., 
Technology, Pharmacy, MIS, 
Statistics or Engg (any field) plus 
1 year exp. in job offered. Con- 
tact: International Systems Tech- 
nologies Inc., 1812 Front Street, 
Scotch Plains, NJ 07076. 


Manager, Software Developer 
sought by NJ based Securities 
Dealer. Must possess Bachelor's 
degree or equivalent in Computer 
Science or directly related field 
and 5 years exp. in software/sys- 
tems development and design 
Respond to: Human Resources 
Department: Knight Trading 
Group, inc., 525 Washington 
Bivd., Jersey City, NJ 07310. 


Programmer: Responsible for soft- 
ware project's requirement 
collecting & analysis, preliminary 
and detailed design, coding, test- 
ing, writing documents and on-site 
implementation, user support and 
further improvement in cattle in- 
dustry. Plan, manage and track the 
schedule of whole development 
cycle and analyze the feasibility of 
project. Provide consultation to 
user and development staff. Req. 
BS or equivalent in CS or CIS with 
nine months exp. in job offered or 
programmer analyst. Must be pro- 
ficient in CIS Management Sys- 
tem, EID Reader, Visual 
dio.NET, XML and RationalRose. 
$52,000.00/yr, 40/wk, 9-5. Send 
resume to LOR, Inc. at 
wiam @ rrrassociates.com. 


Programmer Analysts needed 
Seeking qualified candidates 
possessing BS or equiv. and/or 
rel. work experience. Duties 
include: Designing programs to 
merge purge maintain and inte- 
grate databases; designing, 
developing and maintaining 
company website; providing 
technical support for customers 
and creating front-end user 
applications. Exp. must include 
two years working with Visual 
Basic, MS Access and Crystal 
Reports. Mail res. ref. and sal 
req. to: DataLister Inc., 1595 NW 
1st Court, Boca Raton, FL 


where the best get better 
1-800-762-2977 
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Database Administrators needed: 
Several senior level positions 
available for qualified candidates 
possessing relevant work expe- 
rience. Part of the relevant work 
experience must include 2 years 
working with Peach Tree. Duties 
include customizing, implementing 
and deploying various software 
programs; Setting-up, monitoring, 
maintaining and troubleshooting 
databases. Work with 2 of the 
following: Peach Tree, Oracle, 
FoxPro and Windows NT. Mail 
resume, references and salary 
requirements to: AMG Stars Inc., 
4350 S. Halsted, Chicago, IL 
60609. 


Programmers, Jr. Programmers, 
Software Engineers: Design, 
develop, test and implement 
specialized applications in (1) 
COBOL 78 & 85, DMSIi, Dargal, 
BI Source, BLDIST, BLSched, 
ICD, Tads, MS Access, DB2, 
Cics, People Tools and SQL; (2) 
Oracle 8i, MS Access, C, C++, 
Java, VB, Arc Info, View, FM, 
Mapinfo, Dream Viewer, Bench- 
marking, Six Sigma and SQC 
Tools; (3) Sybase, Java, C++, 
COBOL, CORBA, Visibroker, 
MQ Series, Rational Rose, BEA 
Weblogic, and IBM Websphere. 
Prevailing wage/benefits. Send 
resume to Attn: Raja Narreddy, 
Quantum Infotech, Inc., 30600 
Telegraph Road, Ste 2220, Bing- 
ham Farms, MI 48025. EOE. 


Need Programmer Analysts, Sr. 
Programmer Analysts, Software 
engineers, DBAs, Tech Market 
Analysts, Budget Analysts, QA 
Analysts. Experience sought in 
SAP, VB, Java, ASP, Database 
Administration, Peoplesoft, Oracle, 
QA tools and Technical writing. 
Requirements and Salary vary 
depending upon position: All 
positions require a minimum of 
a Bachelor's degree and experi- 
ence. Must be willing to travel/ 
relocate if necessary. We offer 
salary commensurate with skills 
and a desirable employee bene- 
fits package. Please submit a 
letter of interest and resume to: 
resumes @ syncrotechnologies. 
com. Syncro Technologies, Inc. 


SOFTWARE ENGINEER: An 
Internet Solutions Developer for 
Global Capital Markets is seeking 
a Software Developer who will 
design, develop & maintain large 
scale web-based financial |S 
for ASP/Service Bureau deploy- 
ment. Req'd: BS degree in 
CompSci or related. Min 2 yrs 
exp in the job or as JAVA Pro- 
grammer/Developer. Must have 
delivered & supported multi- 
tiered real-time web-based client 
server application serving the 
financial services industry in 
an ASP environment. Must have 
exp w/JAVA, J2EE, C++, XML, 
Oracle RDBMS & WinNT tech- 
nologies. Send resume to: HR, 
CrossBorder Exchange Corp., 
1410 Broadway, #2700, NY 
NY 10018. REF#BM0023. PLS 
INDICATE REF#. 


Software Engineer. Design/ 
implement healthcare apps in 
the development of Disease 
management systems using VB, 
ASP, VBScript, ADO, XML, 
COM+, HTML, liS, SQL Server 
7.0/2000, Visual Interdev 6, 
Visual Source Safe Windows 
2000. Prevailing wage/benefits. 
Send resume to Attn: Marty 
LeMasuvier, Matria Healthcare 
Inc., 1850 Parkway Place, 12th 
Floor, Marietta, GA 30067. 


Software Engineer to analyze, 
develop, test, implement & main- 
tain customized B2B, B2E, B2C 
applications in a client/server 
environment in different plat- 
forms (Unix and Windows NT) & 
databases. Use Web Services, 
SOAP, XML, JSP, Custom Tags, 
& Java Serviet according to 
J2EE spec and C++ implement- 
ing object oriented artifacts & 
design patterns to perform duties. 
Must have MS in Computer 
Science plus three years of 
experience in similar duties. 
Send resume/cover letter to: 
Adel Santos, DeepBridge Content 
Solutions, 61 Broadway, Suite 
800, New York, NY 10006. 


Software Design Engineer for 
Miami to design and develop a 
web based Customer Relation 
Management (CRM) and financial 
analysis software localized in 
Dutch and Afrikaans. Full time 
position M-F offers good salary. 
Applicants with 5 years related 
experience and working knowl- 
edge of Microsoft Visual Basic 
6, Visual C++, Active Server 
Pages, DHTML and Java Script, 
send resumes only to Mario 
Cabrera, Human Resources, 
SunGard Insurance Systems 
2000 S. Dixie Hwy., Miami, FL 
33133 


Manager, 3D Appl. Rsrch Group, 
wanted for mfgr of computer 
components. Req. B.S. in E.E. 
or related scientific discipline 
plus 8 yrs. tech. devipmt/mgmt 
exp. in comp. graphics industry. 
Reply to K.B., H.R. Dept., ATI 
Research, inc. 62 Forest St., 
Marlboro MA 01752 


Forum Systems currently has 
opportunities in Sandy, UT for 
the following positions 


*Software Engineers 
(Consultants)* 


*Must be available to travel to 
various and unanticipated 
worksites throughout the U.S. 


Positions require Bachelor's in CS, 
Engineering, or related field and 
3 years of software engineering 
experience. Experience must 
include: 1) XML, 2) TCP/IP, 3) 
Linux and 4) Java 


For consideration forward your 
resume to: 
Zak Farrington 
Forum Systems 
45 West 10000 South 
Ste. 415 
Sandy, UT 84070 
(No phone calls) 
www.forumsys.com 


Dir of Development to provide 
tech leadership to analyze, 
design, implement applis using 
Delphi, Java, VB, ERWin on 
Windows; manage databases 
using Oracie, D2K, MS Access, 
SQL; interact with users to gather 
reqs; review project requests 
and prioritize; assign, direct, 
manage development team; 
plan/execute QC policies. Req 
MS in CS / Engg. (any branch) 
with 3 yrs exp in job offered or 
BS or foreign equiv in any 
of above & 5 yrs of relevant 
progressive exp. High salary. F/T. 
Resume to HR, Get Proof, Inc., 
3050, Royal Bivd South., Ste 
195, Alpharetta, GA 30022 


MILLIONS 
READERS 


MILLIONS 
SURFERS 


ONLY 
THOUSANDS 
DOLLARS 


TOTAL IMPACT 
TOTAL 
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Put your message 
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and 
reach the world’s 


best talent. 
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ives 
Spells doom for your old 


Dell Enterprise 


Consolidate with Del! and you'll need find new use for your old servers. 
What kind server consolidation solutions does Dell bring your enterprise? Just what you'd expect: legendary focus you, 
the customer, relentless our focus driving down costs. end-to-end solution that saves you money today and 


tomorrow by delivering 


Maximum flexibility, manageability, value and price/performance. Our new servers, powered 
Xeon” processors, that consistently rank the top industry benchmarks such Collectively lowering 


TCO and accelerating time 


Optimized uptime/maximized investment. new systems management solutions deploy software, tools and 
services which simplify and automate server systems administration. Leveraging your IT resources and maximizing 


your IT dollar. 


Server consolidation services. Our comprehensive portfolio includes consolidation readiness assessment, 
consolidation design and transformation, customer training and certification, deployment and high availability 


Support services 


Flexible financing alternatives. Dell gives you a variety of financing avenues designed to help you optimize ROI! 


For nearly 20 years, we've revolutionized the way the world buys and manages technology. Now find out 
how direct approach can revolutionize your server consolidation. learn more about the Dell test, 


@ visit www.dell.com/serverROI or cal! us toll-free at 1-877-434-DELL. 


solutions that can cut costs today and temorrow. Easy 


Call 1-877-434-DELL visit 


| 
= 
XEON 


experience 


# managing network operations team 
 resoiving UNIX problems 
e working lots of overtime with little reward 


ready experience 


e variety of leadership opportunities in IT 
e workplace that celebrates diversity 
compensation that rewards performance 


STATE FARM 


INSURANCE 


Get there with State Farm. 


‘ Come to work on one of the world’s largest 


; computer networks. And see your hard work 
pay off—in your salary and benefits. Plus, take 
advantage of opportunities to manage friendly 
people from a wide variety of backgrounds. 
These are just a few of the reasons we rank 
#2 in Computerworld's “Best Places to Work.” 


more information, visit statefarm.com" 
mail jobopps.corpsouth @statefarm.com 


Insurance Companies Home Offices: Bloomin 
Opportunity Employer 
q 


NET2S is a leading International 
Consulting and Engineering firm 
specializing in communications 
technologies. We are presently 
seeking to fill the following posi- 
tions: 

* Sr. Tibco (RV, Integration Mgr) 

Developer 
*TIBCO/TRIARCH Systems 
Engineer 

* Sr. Security Systems Engineer 
All positions require BS/MS 
degree with a minimum of 2 to 3 
years of experience in the field. 
Must possess excellent commu- 
nication skills as well. 

NET2S, 82 Wall Street Suite 400, 
New York, NY 10005; Fax: (212) 
279- 1960; Phone (212) 279-6565; 
or Email: jobus-ny @ net2s.com 


It's like having 
the 
all the hottest tech jobs, 
all the time. 
The hottest job lead$ you can’t 
find anywhere else are all right 
tech jobs, the time. Get the 
inside track the tech 
2 ™ 7] 
7 


THE WORLD 
Work 
CHANGING 
EVERY WEEK. 


LUCKILY, 
ARE Too! 


For the most 
date opportunities 
and coverage, stay 


tuned with us. 


get hetter 


1-800-762-2977 
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CAREERS 


V GROUP INC 

Software & consulting company 
seeks qualified professionals 
(Bachelor's degree +) for nation- 
wide positions 

Programmer / System Analyst 
Web Developers (Java, coldfusion, 
ASP) 

Web Masters 

ERP/CRM Professionals (Siebel 
SAP, BaaN) Tools (Actuate, 
Crystal Reports) Client Server 
(Oracle, C, C++, VC++, VB) 
System Administrators 

(Solaris, HP-UX, AIX, Windows 
NT, Cisco) Database Administra- 
tors (Oracle Apps, Peoplesoft. 
Sybase, Oracle, DB2) 

Salary: $90,000 - $110,000 PA 
Benefits available 

Send resume to: 

V Group Inc 

1220 N Market St, Ste 206 
Wilmington, DE 19801 

jobs @vgroup.net 

Fax: 954-697-4677 


Computer Software Engineer 
Atlanta, Georgia 


Design software adhering to 
well-structured software engi- 
neering standards, including the 
design specifications and devel- 
opment schedule. Primary 
responsibility includes specific 
tools for GIS/Remote Sensing, 
help test software and on-line 
help. Masters degree in informa- 
tion Systems or Computer Science 
and 3-5 years’ experience re- 
quired, familiarity with ERDAS 
products and good working 
knowledge of ESRI ArcObjects 
required. Experienced in the 
development of algorithms 
as they pertain to the GIS/ 
Remote Sensing. ERDAS, LLC 
jody.stepakoft @ gis.leica-geo 
systems.com 


Forum Systems currently has 
opportunities in Sandy, UT for 
the following positions 


“Software Engineers 
(Consultants)* 


“Must be available to travel to 
various and unanticipated 
worksites throughout the U.S. 


Positions require Bachelor's in CS, 
Engineering, or related field and 
3 years of software engineering 
experience. Experience must 
include: 1) XML, 2) TCP/IP, 3) 
Linux and 4) Java 


For consideration forward your 
resume to: 
Zak Farrington 
Forum Systems 
45 West 10000 South 
Ste. 415 
Sandy, UT 84070 
(No phone calls) 
www.forumsys.com 


Mathematica Policy Research 
Inc., a leader in policy research 
and analysis, has an opening for 
a Senior Programmer/Analyst 
(SAS Programmer) to convert 
data from research project spec- 
ifications to create or modify 
computer programs using SAS. 
Stata and Visual Basic. Qualified 
individuals should possess a 
Masters or equivalent in Econ. 
Math, Info. Sys., Stats. or De- 
mography. For immediate con- 
sideration, please send resume 
(no calls) to Kim Wilson, Mathe- 
matica Policy Research, Inc 

600 Maryland Ave.. SW, Ste 
550, Washington, DC 20024 
Please reference job code: 2892 


Software Engineer. Duties: Assist 
w/develop. & testing of comp. 
appls. for P609 server. Assist 
w/develop. of system console 
software on Linux Assist in 
performing custom prog. to im- 
prove efficiency of web-based 
appls. using Java & AIX. Perform 
& document testing of software 
projects for graphical user inter- 
face platform mgmt. hardware. 
Requires: B.S. (or foreign equiv.) 
in Comp. Sci., Eng. or a related 
field & 3 yrs. exp. in the job of 
fered or 3 yrs. exp. as a Systems 
Tester or Prog./Analyst. Concur- 
rent exp. must incl. 3 yrs. exp. 
performing testing of software 
projects & 3 yrs. exp. using Java 
& Linux. EOE. 40 hrs./wk. 8:00 
a.m.-5:00 p.m. Send resume (no 
calis) to: Molly Stone, CTG, Inc., 
800 Delaware Ave., Buffalo, NY 
14209-2094. 


Numann Technologies, Inc., an 
Elk Grove, CA based Software 
Consulting firm is looking for: 


Computer Programmers 
UNIX System Administrators 
Software Engineers 


Must have at least a Bachelor 
Degree in Computer Science/ 
Mathematics/Physics or equiva- 
lent, with at least 3-5 years relevant 
experience. Must be willing to 
travel from Elk Grove, CA to 
temporary worksites throughout 
the US, to be paid. at least, the 
prevailing wage in that area. 
Employee will remain employed 
by Numann Technologies, Inc. 
E.O.E 


Fax or mail resume to: 

Numann Technologies, Inc., 
9021 Lanetry Court, Elk Grove, 
CA 95758; Fax: (916) 351-0337: 
Email: gen@numann.com 


Databased Solutions Inc. has 
openings for Programmer Ana- 
lysts with at least four years of 
experience in programming and 
quality assurance, including 
two years of experience in ISO 
9000 implementation. Job Duties: 
Analysis, design, development, 
testing, customization, docu- 
mentation, installation, and 
impiementation of web based 
software applications and client 
‘server applications using Novell, 
Visual Basic, TCP/IP, UDP/IP, 
Oracle, Java, Lotus, Power- 
Builder, and Cobol; QA testing 
and implementation using tools 
such as Rational, Mercury, Silk, 
Jprobe. Some positions require 
two years experience with a 
Bachelors degree or a Masters. 
Excellent Pay and Benefits. Maii 
resume to: HR Dept., Databased 
Solutions Inc. 100 Jersey Av- 
enue, Suite B-201 New 
Brunswick, New Jersey 08901 


Software Engineer: Responsible 
for the database administration 
of PeopleSoft general ledger ap- 
plication; provide production 
support, planning and imple- 
mentation of production releases, 
problem determination and 
resolution; handle performance 
tuning, backup, recovery and 
disaster recovery of the database. 
Requires Bachelors degree in 
Engineering or Computer Science 
plus one year experience in the 
job offered or one year experi- 
ence in database administration 
of PeopleSoft general ledger 
application. Salary $88,400/yr, 
40 hrs/wk, 8AM-SPM, Mon-Fri 
Job site in Manchester, NH. To 
apply send two (2) copies of your 
resume/letter of application to: 
Job Order #2002-399, P.O. Box 
989, Concord, NH 03302-0989. 


Data Coordinating Specialist ! 
Boehringer Ingelheim Pharma- 
ceuticals, Inc. has multiple open- 
ings in its Ridgefield, Connecticut 
office for the positions of Data 
Coordinating Specialist | 


Manages and reviews discrep- 
ancy database, recommends 
solutions leading to resolution of 
data discrepancies that involve 
inclusion of medical data in the 
database and applies Medical 
Data Management policies and 
procedures for timely processing 
of product efficacy and safety 
data 


Must possess at least a bachelor's 
degree or its equivalent in the 
Medical or Biological field and 
relevant experience, including 
experience with medical termi- 
nology, medicine, clinical research 
and data processing, computer 
applications on multiple systems 
and FDA pre-submission for 
device. 


Resume and/or cover letter must 
reflect each requirement above 
and specify reference code 
AD-GCD/GC1102 or it will be 
rejected 


Forward resume to Bi Staffing 
Center, PO Box 534, Waltham, MA 
62454. Fax number: (781) 663 
2431. Email: BIP|@ Bi-careers. 
com. EOE 


Programmer/Web Developer- 
Chicago NW suburb, 40 hrs. per 
wk. 9AM - 5PM, $62,305 per yr. 
Will design and implement large 
scale back-end databases for 
clients using MS SQL Server 
7.0. Will develop server side 
applications using ASP. Visual 
Basic and VB Script. Will provide 
front-end web site development 
using HTML, Java Script, Dream 
weaver and Flash. Will provide 
technical support to clients in the 
above areas. Must have Bachelors 
of Science degree in Computer 
Engineering, and 1 yr. of exp. in 
job offered or 2 yrs. exp. as a 
Computer Programmer. Must 
have 2 yrs. of exp. with MS SQL 
Server, Access & database de- 
sign; 1 yr. exp. with Visual Basic 
9 months exp. with ASP, Java 
Script, HTML, Adobe Photoshop 
& Macro media Flash. Applicants 
must show proof of legal authority 
to work in U.S. No Calls - Send 2 
copies of both resume & cover 
letter to: Illinois Department of 
Empioyment Security, 401 S 
State St., - 7 North, Chicago, IL 
60605, Attn; Leila Jackson, Ref 
#V-IL 30279-J. An Employer Paid 
Ad. 


Software Developers - Technology 
firm seeks qualified professionals 
to design/develop/ program 
software solutions. There are two 
positions open at each of at 
our offices in New York, NY, 
Coraivilie, & San Francisco, 
CA. The ideal candidate will have 
exp. in any of the following: java, 
xmi, xsl, jdbc, html, vb, asp, sql 
J2EE, c/c++, Unix/WinNT. Must 
have a BS degree in Comp Sci 
Engineering, or equivalent & 
at least i yr related exp. Send 
resume to: ScreamingMedia inc 
HR, 601 W 26th St, 13th Fi, NY, 
NY 10001 Attn: D. DeSimone 
EOE. Also visit our website at 
www.screamingmedia.com 


Openings for (a) Business Ana- 
lyst, with industry exp. in SQL 
utilities, C/C++, Oracle 8), Pro*C. 
Bpwin 4.0, OEM, web server 
admin., NT/Unix, (b) Analyst I! 
with exp. in RMAN., Ipchains. 
Watchgurad, Oracle EDMS 
v.2.1.0., 8i, Linksys, SOL utilities. 
C/C++, Digital Alpha Server. 
Digital Unix, etc. etc. Pay match- 
ing exp. Foreign educ. equiv. 
accepted. Travel/relocation reqd 
Res. to Paramount Software 
Tech., Inc., P.O. Box 871008, 
Morrow, GA 30287-1008 


Software Engineer and Senior 
Software Engineer consulting 
Positions to develop, create, and 
modify computer systems and 
applications software and spe- 
cialized utility programs. Analyze 
and design databases within an 
application area. Analyze user 
needs and develop software so- 
lutions. Must travel and relocate 
frequently. Bachelor's or Master's 
degree or foreign equivaient is 
required in one of several limited 
fieids: Computer Science/Appli- 
cations, Engineering, Chemistry, 
Math, Physics, or scientific or 
business related field. In lieu of 
Bachelor's degree, three years 
of undergraduate study and 
three years of experience as 
a computer professional will be 
accepted. In lieu of Master's 
degree, Bachelor's degree or 
foreign equivalent with five years 
of progressive experience as a 
computer professional will be 
accepted. Some positions re- 
quire one year of experience in 
the job offered or as a computer 
professional. Candidates must 
have one year of experience ina 
particular skill set. CRM: Siebel. 
Clarify, Oracle CRM, SAP CRM 
ERP: PeopleSoft, SAP. Baan, 
J.D. Edwards, Oracle Applica- 
tions/Financials/ Manufactur- 
ing/HR; GUI: Windows 95/98/00. 
Windows NT, Unix, Oracle, Visu- 
al C++, C, C++, Visual Basic. 
PowerBuilder, MFC, Crystai Re- 
ports, COM/DCOM, CORBA; in- 
ternet Applications: ASP. HTML, 
Java Script, Java, Coldfusion 
Broadvision, ATG Dynamo, Net- 
dynamics, Websphere, Java 
Beans, Front page, CGI, Pear! 
MTS, IIS; Mainframe: I|BM3090. 
IBM ES900, MVS, IMS. CL/400. 
CICS, TSO, VSAM, COBOL 
JCL, AS/400, DB2, VAX/VMS; 
Oracle RDBMS: Designer 2000. 
Jeveloper 2000, Oracie RDBMS. 
SQL"Plus, Pro*C, PL/SQL, SQL* 
Forms, SQL*Reports, SOL 
“Loader, Oracie Forms, Oracle 
Reports, SOL“Menu, SQL*DBA 
SQL*Net; RDBMS: Informix 
Oracle, FoxPro, Sybase, SQL 
Server, Progress; Unix/NT Ad- 
ministrators: RS/6000, Sun Sparc, 
Sun Ultra, SUN Enterprise, HP 
9000, Logical Volume Manager, 
IBM RAID, SSA, TCP/IP, SUN 
CLUSTER, HIGH Availability, 
SUN RAID, Veritas Volume 
Manager, NIS, NIS+, NFS, MC 
Service Guard, HP Openview. 
Linux, FreeBSD, GNU. Please 
submit resumes with cover letter, 
specifying position of considera- 
tion, to: Rapidigm, Immigration 
Section, code# 92R, 4400 


AVX Corporation, a worldwide 
leader in manufacturing passive 
electronic components and 
Capacitors, has an opening for a 
Computer Programmer Analyst. 
Duties are the following: 1 
Updates, tests and maintains 
WALKER FINANCIAL software 
applications; 2. Monitors and 
maintains VSAM database for 
WALKER FINANCIAL software 
applications; 3. Utilizes 
CICS/VS/COBOL I! to determine 
new features such as on-line 
menus, screens and database 
operations for WALKER FINAN- 
CIAL software applications; ard 
4. Utilizes EXPEDITOR computer 
Programs to resoive batch pro- 
duction problems and enhance 
codes for WALKER FINANCIAL 
software appiications: Salary and 
benefits offered are commensu- 
rate with the position. Minimum 
requirements are a Bachelor's 
Degree in Computer Science. 
Mathematics, or Chemica’ 
Engineering and one year. six 
months experience in the job 
offered. Work schedule is from 
8:30 a.m. to 5:30 p.m., Monday 
through Friday, 40 hours per 
week. The position is located in 
Myrtle Beach, South Carolina 
Applicants must send twe 
resumes to the following: AVX 
Corporation, Human Resources 
Dept. 15, Computer Programmer 
Analyst Position, Post Office Box 
867, Myrtle Beach South 
Carolina 29577. No Phone Calls 
please 
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Siebel and SAP 


ware its Sapphire user 
conference in Lisbon, Portugal. 
The upgrade, due ship the 
end this month, uses SAP’s 
new Web Dynpro presenta- 
tion-level technology role- 
based user interfaces designed 
give workers job-specific 
views data and make the 
CRM software easier use. 

John Grozier, group director 
CRM product marketing 
SAP, said Version 3.1 of mySAP 
CRM will also tightly inte- 
grated into the company’s por- 
tal software. That will let end 
users take data, such cus- 
tomer address, from CRM 
system and drag and drop the 
information into other SAP ap- 
plications, Grozier said. 

Denis Pombriant, analyst 
Aberdeen Group Inc. 
Boston, said Siebel and SAP 
are going somewhat differ- 
ent directions with their new 
releases. Siebel focusing 


delivering end-to-end business include any vertical-industry 


processes specific vertical 
industries, said, while SAP’s 
portal integration capabilities 
are aimed easing the integra- 
tion front-end CRM applica- 
tions and back-office systems. 
“The way Siebel going 
really believe the right direc- 
tion,” said Kevin Lathrop, 
Unishippers Association Inc., 
Salt Lake City-based compa- 
whose 300-plus franchisees 
provide shipping services 
the U.S. and the U.K. “One 
the reasons selected Siebel 
was that they would stay with 
best practices and build them 
into the product over time.” 
Unishippers beta-testing 
the partner relationship man- 
agement application Siebel 
7.5 and plans live with the 
software the first quarter 
next year, Lathrop said. The 
product will replace home- 
grown applications, added. 
Lathrop said he’s particular- 
interested the sales and 
customer service processes 
embedded Siebel al- 
though added that doesn’t 


tools 
for transportation companies. 

Joanie Rufo, analyst 
AMR Research Inc. Boston, 
said Version 3.0 mySAP 
CRM, which became available 
the third quarter last year, 
was SAP’s first truly competi- 
tive release. And Version 3.1 
better positions the company 
rival San Mateo, Calif.- 
based Siebel and other CRM 
vendors such Oracle Corp. 
and PeopleSoft Inc. Pleasan- 
ton, Calif., Rufo said. 

Barry McGoldrick, director 
global application develop- 
ment Molex Inc. Lisle 
said the maker electronic 
components plans upgrade 
Version 3.1 mySAP CRM 
early next year. 

Molex, which uses SAP’s R/3 
enterprise resource planning 
software and Version 2.0 
mySAP CRM, already test- 
ing the new CRM release. Mc- 
Goldrick said end users the 
company have given thumbs 
the software’s ease-of- 
use improvements. 


Siebel Brings App Integration Forefront 


With the release its Siebel 7.5 
upgrade, Siebel Systems taking 
more steps fulfill promise 
simplify business process and ap- 
plication integration work for users 
through its Universal Application 
Network (UAN) technology. 

UAN, which was announced 
April, designed make easier 
for companies connect 
CRM applications homegrown 
systems and packaged applica- 
tions developed other vendors. 
Usage the technology still 
its infancy while Siebel, working 
with partners, continues develop 
the specifications. 

But Siebel 7.5 includes em- 
bedded set UAN-based Applica- 
tion Services Interfaces, which ex- 
pose proprietary applica- 
tion processes Web services. 
also comes with support for linking 
the software applications based 
Java Enterprise Edition Mi- 
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crosoft technology, 
according Siebel. 

Kevin Lathrop, Salt Lake 
City-based Unishippers, said the 
UAN interfaces could let cus- 
tomers its franchisees access 
data from variety systems and 
check invoices and the status 
shipments regardless which 
freight carrier delivering the 
goods. 

Lathrop said isn’t sure Uni- 
shippers will roll out the UAN tech- 
nology the near term. But, 
added, suspect we'll using 
more and more supports our 
future direction.” 

Tim manager Bose 
Corp. Framingham, Mass., said 
UAN should give users way 
easily extract data from Siebel ap- 
plication tables without having 
change their structure the busi- 
ness that are built into them. 

Bose, which makes audio sys- 


tems, uses CRM tools but 
has also installed back- 
office applications and People- 
human resources software. 
Arnold said hopes implement 
some the UAN technology within 
his systems next summer. 

Siebel playing catch-up in- 
tegration technology, said Joshua 
Greenbaum, analyst Enter- 
prise Applications Consulting 
Daly City, Calif. Users are demand- 
ing that CRM applications become 
more than stand-alone tools and 
offer integration other software, 
such manufacturing, supply 
chain management and logistics 
systems, added. 

Siebel has “to get moving” with 
UAN could risk being margin- 
alized SAP and cther rivals that 
are ahead supporting inte- 
gration with applications other 
than their own, Greenbaum said. 

Songini 
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Legacy Ties 


Siebel’s applications and the 
transaction systems used 
Countrywide’s business units. 
Vigna said would have 
been too time-consuming and 
expensive tie together all 
the customer data stored the 
transaction systems Siebel 
without the WRQ tools. Most 
the transaction systems run 
AS/400s, although Country- 
wide also has small main- 
frame installation, 
Siebel will installed 
Windows 2000 servers. 


Mixing New and Old 


Tyler McDaniel, analyst 
Hurwitz Group Inc. Fram- 
ingham, Mass., said Country- 
wide’s integration challenges 
are classic example the 
problems faced companies 
that need mix new CRM ap- 
plications with the systems 
that are already installed. 

lot the systems have 


been existence number 


years, and result, they’re 
very complex,” McDaniel said. 
“When you try hook one 
complex system, 
AS/400, into another complex 
system, like Siebel, you com- 
pound the issue.” 

Vigna said the plan pro- 
duce single view customer 
data further complicated 
the presence more than 
half-dozen customer transac- 
tion databases that feed data 
end users via 5250 emulation 
software. addition, Country- 
wide uses IBM’s Java 2 Enter- 
prise Edition-based WebSphere 
Application Server software 
control existing series 

Jeb applications. 

effort solve the inte- 
gration conundrum, Country- 
wide plans use Vera- 
stream software translate 
customer data stored the 
into reusable compo- 
nents that can read the 
Siebel applications. Vera- 
stream being installed 


Countrywide installing 
the following software 
part its CRM project: 

The Web-based Siebel 
CRM suite integrate customer 
data from different business 
units within single user interface 


Verastream Host In- 
tegrator and Information Bro- 
ker tools turn data the com- 
AS/400 systems into 
reusable components that can 
accessed Siebel 


centralized component broker 
servers, according Vigna 

“The Verastream software 
enables create single in- 
behind the scenes our lega- 
5250 applications,” said. 
‘And allows our J2EE compo- 
WebSphere environment, Unix 
any other environment. 
That was key for us.” 

Another problem Country- 
wide facing the fact that 
many its Web-based trans- 
actions run near real time, 
but the applications 
AS/400 servers were designed 
processed batch mode. 
Verastream should mitigate 


that issue enabling the 


batch systems function 
real-time speeds, Vigna said. 

The first phase the CRM 
project 
Balboa Life Casualty 
insurance group, 
based Irvine, Calif. Balboa 
plans use Siebel combi- 
nation with its existing sys- 
tems set virtual claims 
office that’s designed give 
its workers and customers 
Web-enabled view the in- 
surance claims process. 

The plan calls for limited 
information about insurance 
policies entered into 
Siebel Then data from Bal- 
boa’s existing systems will 
integrated into the Siebel soft- 
ware via Verastream, and all 
claims-related transactions 
will eventually processed 
within Siebel 
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FRANK HAYES FRANKLY SPEAKING 


The Faith 


DON’T HAVE ANY COMFORTING LESSONS politically 
convenient conclusions the anniversary Sept. 
now you’ve probably heard what all means dozens times 
over, from deep thinkers far more confident than about 
what should and how should feel and the best way 
commemorate the thousands murdered that Tuesday morn- 


ing year ago. 

Sorry, but don’t know how sum the 
deaths thousands people few catchy 
phrases. 

And you ask what means for corpo- 
rate shops, don’t know that either. Yes, 
have our part play tightening security, im- 
proving communications and preventing more 
attacks. But what really means? have 
find that for yourself. 

What know, from the endless discus- 
sions and dissections the terrorists during 
the past year, that those murdered thousands 
were killed people who hate the modern 
world. They took control our technology, 
using weapon destructive could de- 
molish skyscrapers. But they did the name 
turning back the clock. 

The ideas that are fundamental the mod- 
ern world science, technology and most 
all, information were anathema the 
killers. They weren’t just trying slaughter 
the people the World Trade Center and the 
Pentagon. They wanted destroy progress. 

And that’s what people are all about. 

believe progress, and technology and 
information. believe our job use tech- 
nology and information create value and 
benefit, and sometimes even good. 


believe new ideas and fresh approaches 
can better than old ways and notions 
least sometimes. know from 
long experience that the difference 
between good new idea and bad 
new idea can remain invisible 
until try each them, and 
sometimes until try them again 
and again. 

don’t believe technology 
unalloyed good. But believe 
technology can used make in- 
dividuals more powerful and orga- 
nizations more effective. And 
believe those who wield technology 
can use for good. 


FRANK HAYES, Computer- 
world’s senior news colum- 
nist, has covered for more 
than 20 years. Contact him at 
frank_hayes@computerworld.com. 


believe can use technology store and 
process it, but also discover new informa- 
tion didn’t know, see patterns didn’t 
recognize before. 

believe communication. believe 
can bring people together cooperate 
compete. know its risks: misunderstanding, 
conflict, fear. But believe those risks are 
worth taking for the opportunity exchange 
ideas with people otherwise would never 
come know. 

believe information and technology can 
bridge differences, level inequalities and offer 
opportunities. believe they can used 
heal the sick, feed the hungry and make lives 
better, though they’re not always used that way. 

believe the new, the unfamiliar, the 
different. accept the unexpected. de- 
light coming know what was unknown. 
believe complexity and confusion, and 
overcoming them with simplicity and clarity 
and elegance and, when necessary, the occa- 
sional ugly kludge. 

Most all, believe progress. be- 
lieve things can get better not just that next 
year’s computer network software will 
faster, more powerful and more useful than this 
year’s model, but also that over time, and 
our companies, our industries, even our soci- 
eties can transformed. 

believe can solve prob- 
lems. believe that once those 
problems are truly solved, there 
can going back. believe 
the future. believe can 
change the world. 

These are the beliefs people 
share, matter their nation 
creed culture. 

may not able tell you 
what Sept. means. But can say 
this: That faith progress, tech- 
nology and the future about 
far from the murderers Sept. 
anyone can get. 
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Laptops for Everyone! 


This laptop used workers for field inter- 
views, power-saving features are turned on, includ- 
ing the option turn off the cooling fan 
when needed. But hangs sometimes, reports 
pilot fish. finally know what the problem is,” user 
tells fish one day. was interviewing man who told 
really knows lot about computers. showed 
that the fan turning and told the com- 
puter just needed new fan belt.” 


Well, two hours, 
already replaced the bat- sent you?’ Dead silence 
tery once. Support pilot then said, 
fish checks the Detail 
chine was hot, Traveling user calls sup- 
pick up,” fish port pilot fish com- 


says it’s plugged into 
the docking station and 
the travel power cord. 
User explains, figured 
would charge the bat- 
tery twice fast.” 


plain that his remote ac- 
cess isn’t working. Noth- 
ing fish tries fixes it, and 
user getting irate. 
takes several days be- 
fore user adds one more 


detail his complaint: 


Plenty Packing 
Help desk pilot fish in- 
structs remote user 
use plenty packing 
material when shipping 
his laptop for repair. But 
when arrives, the 
screen looks like it’s 
been hit with hammer. 
How was the laptop 
packed? “It was placed 
the box with almost 
entire ream copier pa- 
per. Flat, uncrumpled 
copier paper,” sighs fish. 
“Might have 
been block wood.” 


forgot mention that 
the laptop was damaged 

case the airport.” 


Too Late! 

Visiting laptop has 
“I” key that 

work, and support pilot 

fish asked help. But 
he’s too late. thought 


seen everything,” 
says fish. “But VIP uses 


screws from bottom 


laptop it’s still running 
flips upright, pries 


out the keyboard, re- 


Right Question 
New remote hire can’t 
dial get e-mail, and 
pilot fish baffled. 
“We went through the 
network and dial-up set- 
tings, but nothing was 
like was supposed 
be,” says fish. 


moves the cable, blows 

the connectors, then 
puts back together. 

now works.” Turns out 

own help desk 

knows about the prob- 

lem and advises travel- 

ers keep screwdrivers 


handy just case. 


FEED THE SHARK! Send your true tale life 


sharky@computerworld.com. You snag snazzy 


Shark shirt use it. And check out the daily feed, browse 
the Sharkives and sign for Shark Tank home delivery 


computerworld.com/sharky. 


pe 


How you extract, transform and 
load data while assuring quality? 


Build data warehouse 
with single point control? 


And simplify the way you create 
and customize enterprise reports? 


Onty SAS provides high-impact, low-risk way 
achieve intelligent data warehousing. You can 
surface information from any source—corporate 
systems, e-business channels, your supply chain 
and any platform. And deliver 
shared version the truth throughout your 
enterprise. find out how top companies reap 
bottom-line rewards with SAS software, call toll free 
866 270 5727 visit www.sas.com/warehouse 


SAS and ail other SAS Institute inc. product or service names are registered tradernarks or trademarks of SAS institute inc. in the USA and other countries. ® indicates USA registration. © 2002 SAS Institute inc. Ail rights reserved 50046US.0502 
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WebSphere. 


NTEGRAT 


WIN WITH INTEGRATION: Nothing fishy about it. For e-business 
thrive, all your business processes, from supplier customer, must 
work together It’s the key profitable infrastructure. 

WIN WITH WEBSPHERE: the integration software, 
WebSphere the leading software platform for integrating business 
processes, applications, platforms and people. WebSphere. Part 
our software portfolio including Lotus® and 


MAKE THE PLAY: Visit and 
see Webcast how WebSphere can help cut integration costs. 


business the game. Play win.” 


— 


